From 63bb02d5471442c5c37f2d9be193422e0e2dce57 Mon Sep 17 00:00:00 2001
From: Dave Long <dave@longwaveconsulting.com>
Date: Wed, 15 Mar 2023 14:30:07 +0000
Subject: [PATCH] SA-CORE-2023-004 by DamienMcKenna, elarlang, larowlan,
 effulgentsia, pandaski, mcdruid, jenlampton, quicksketch, greggles

---
 core/modules/system/src/Controller/SystemInfoController.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/core/modules/system/src/Controller/SystemInfoController.php b/core/modules/system/src/Controller/SystemInfoController.php
index c6d99242282..7ba496bf4fc 100644
--- a/core/modules/system/src/Controller/SystemInfoController.php
+++ b/core/modules/system/src/Controller/SystemInfoController.php
@@ -62,7 +62,7 @@ class SystemInfoController implements ContainerInjectionInterface {
   public function php() {
     if (function_exists('phpinfo')) {
       ob_start();
-      phpinfo();
+      phpinfo(~ (INFO_VARIABLES | INFO_ENVIRONMENT));
       $output = ob_get_clean();
     }
     else {