[wp-trac] [WordPress Trac] #57304: Add SensitiveParameter attribute to DB connection and login variables

WordPress Trac noreply at wordpress.org
Sun Dec 11 07:35:32 UTC 2022


#57304: Add SensitiveParameter attribute to DB connection and login variables
-------------------------------+---------------------
 Reporter:  TobiasBg           |       Owner:  (none)
     Type:  enhancement        |      Status:  new
 Priority:  normal             |   Milestone:  6.2
Component:  Security           |     Version:
 Severity:  normal             |  Resolution:
 Keywords:  needs-patch php82  |     Focuses:
-------------------------------+---------------------

Comment (by jrf):

 I fully support this proposal.

 Note for the implementation: the attribute can only be added to individual
 parameters in function declarations, so can not be applied to global or
 function local variables.

 Related RFC: https://wiki.php.net/rfc/redact_parameters_in_back_traces

 Side-note: we may need to verify that existing tooling, like the
 documentation generation tooling and WordPressCS, are able to deal with
 attributes for function parameters in function declarations. If not, those
 will need to be updated.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/57304#comment:1>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list