Verified Commit 1d1593ff authored Oct 10, 2025 by Dave Long

Issue #3032737 by heddn, smustgrave, xjm, dww, longwave, larowlan, klonos,...

Issue #3032737 by heddn, smustgrave, xjm, dww, longwave, larowlan, klonos, anpel, znerol, quietone, sourabhjain, nexusnovaz: Comment in \Drupal\Component\PhpStorage\FileStorage::createDirectory() that additional information is not included for security reasons

(cherry picked from commit 027156e5)

parent 661fea38

core/lib/Drupal/Component/PhpStorage/FileStorage.php

+3 −1

Original line number	Diff line number	Diff line
		@@ -119,7 +119,9 @@ protected function createDirectory($directory, $mode = 0777) {
		return TRUE;
		}
		else {
		// Something failed and the directory doesn't exist.
		// The directory path is not disclosed to avoid an information
		// disclosure vulnerability. For security reasons, further details are
		// not provided in the error message.
		trigger_error('mkdir(): Permission Denied', E_USER_WARNING);
		}
		}