Repository navigation
[Feature] Add #[SensitiveParameter] attribute for sensitive data protection #777
Description
Activity
Thanks for the report @jeshtan. I'll add this now.
Reacted by Tan Jeong Shiun@stevebauman Thanks for your effort. The #778 PR works as expected. Hope can see it get merged soon :)
Hi @jeshtan just an update on this -- I'm going to wait until January 2026 to merge the PR in as PHP 8.1 is still supported with security updates til December 31st, 2025: https://www.php.net/supported-versions.php. These security annotations are only available in 8.2, so I want to continue supporting 8.1 until PHP themselves drop support 👍
@stevebauman bump
Our external pentest team had identified the exposure of ldap password in stack traces and logs.
Could you adding `#[SensitiveParameter] attribute to method parameters that contain sensitive information to migrating security risk?
Thanks.