From 4288674651e18360e8e3988c528e9a8c66666ff0 Mon Sep 17 00:00:00 2001
From: Remi Collet <remi@php.net>
Date: Sat, 8 Dec 2018 10:24:36 +0100
Subject: add imap.enable_insecure_rsh in php.ini

---
 php.ini-development | 7 +++++++
 1 file changed, 7 insertions(+)

(limited to 'php.ini-development')

diff --git a/php.ini-development b/php.ini-development
index 9e7094c4fb..3b8a2aff32 100644
--- a/php.ini-development
+++ b/php.ini-development
@@ -975,6 +975,13 @@ cli_server.color = On
 ; otherwise output encoding conversion cannot be performed.
 ;iconv.output_encoding =
 
+[imap]
+; rsh/ssh logins are disabled by default. Use this INI entry if you want to
+; enable them. Note that the IMAP library does not filter mailbox names before
+; passing them to rsh/ssh command, thus passing untrusted data to this function
+; with rsh/ssh enabled is insecure.
+;imap.enable_insecure_rsh=0
+
 [intl]
 ;intl.default_locale =
 ; This directive allows you to produce PHP errors when some error
-- 
cgit v1.2.1