SA-CORE-2023-004 by DamienMcKenna, elarlang, larowlan, effulgentsia, pandaski, mcdruid, jenlampton, quicksketch, greggles

2023-03-15 14:30:07 +00:00 · 2023-03-15 14:30:07 +00:00 · 63bb02d547
parent 02aab21d0e
commit 63bb02d547
1 changed files with 1 additions and 1 deletions
--- a/core/modules/system/src/Controller/SystemInfoController.php
+++ b/core/modules/system/src/Controller/SystemInfoController.php
@ -62,7 +62,7 @@ class SystemInfoController implements ContainerInjectionInterface {
  public function php() {
    if (function_exists('phpinfo')) {
      ob_start();
-      phpinfo();
+      phpinfo(~ (INFO_VARIABLES | INFO_ENVIRONMENT));
      $output = ob_get_clean();
    }
    else {