SA-Core-2023-004: Remove info variables from phpinfo page.

herbdool · web-flow · commit 7a117b6816c1 · 2023-03-15T16:00:52.000-04:00
diff --git a/core/modules/system/system.admin.inc b/core/modules/system/system.admin.inc
@@ -2298,7 +2298,7 @@ function system_run_cron() {
  * Menu callback: return information about PHP.
  */
 function system_php() {
-  phpinfo();
+  phpinfo(~(INFO_VARIABLES | INFO_ENVIRONMENT));
   backdrop_exit();
 }
 

Original file line number	Diff line number	Diff line change
`@@ -2298,7 +2298,7 @@ function system_run_cron() {`
`2298`	`2298`	`* Menu callback: return information about PHP.`
`2299`	`2299`	`*/`
`2300`	`2300`	`function system_php() {`
`2301`		`- phpinfo();`
	`2301`	`+ phpinfo(~(INFO_VARIABLES \| INFO_ENVIRONMENT));`
`2302`	`2302`	`backdrop_exit();`
`2303`	`2303`	`}`
`2304`	`2304`