[whoalin1]

Summary

Documents how app authors keep secrets out of logged exception stack traces in developer_manual/basics/logging.rst.

• New section after Logging exceptions: mark parameters that take secrets with PHP's standard #[\SensitiveParameter] attribute, with a short example.
• States that since Nextcloud 36 the logger handles the attribute like its other sensitive data (feat(log): Add support for \SensitiveParameter attribute server#65412).
• deprecated:: 36 note for IRegistrationContext::registerSensitiveMethods().
• Note that this only covers stack traces. Never put passwords, tokens, or personal data into a log message yourself.

Closes #15680

sphinx-lint passes locally on the changed file. I have not run the full Sphinx build.

---

AI disclosure

This PR was drafted with the help of AI coding assistants (Cursor agents / LLM-based tools), including the description. I am responsible for it and happy to rework anything that doesn't fit.

All commits carry an Assisted-by: Cursor:grok-4.7 trailer.

[skjnldsv]

Make sense to me, but I'll wait for other approvals

[come-nc]

No, the standard attribute from PHP should be used instead nowadays: https://www.php.net/manual/en/class.sensitiveparameter.php

We should deprecate our custom implementation for this and rely on this standard mechanism as well for core functions. (We can since we dropped 8.1 support in 33)

[come-nc]

See nextcloud/server#65412 to fully support SensitiveParameter and deprecate registerSensitiveMethods.

[github-actions]

Hello there,
Thank you so much for taking the time and effort to create a pull request to our Nextcloud project.

We hope that the review process is going smooth and is helpful for you. We want to ensure your pull request is reviewed to your satisfaction. If you have a moment, our community management team would very much appreciate your feedback on your experience with this PR review process.

Your feedback is valuable to us as we continuously strive to improve our community developer experience. Please take a moment to complete our short survey by clicking on the following link: https://cloud.nextcloud.com/apps/forms/s/i9Ago4EQRZ7TWxjfmeEpPkf6

Thank you for contributing to Nextcloud and we hope to hear from you soon!

(If you believe you should not receive this message, you can add yourself to the blocklist.)

[whoalin1]

@come-nc thanks, makes sense. Now that nextcloud/server#65412 is merged, I reworked the section in e7cdeea. It now recommends #[\SensitiveParameter] with an example, and has a deprecated:: 36 note for registerSensitiveMethods(). I updated the title and description to match.

AI disclosure: this reply and the change were drafted with help from an AI assistant.