PHP includes an easter egg. On any PHP page, one can add any of these after the .php part of the path in order to display special results:
?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000 ?=PHPE9568F36-D428-11d2-A769-00AA001ACF42 ?=PHPE9568F35-D428-11d2-A769-00AA001ACF42 ?=PHPE9568F34-D428-11d2-A769-00AA001ACF42 They appear innocuous for browser use, doing things such as displaying the credits for PHP or a few static bitmaps. However if some web application consumes output from an API that's implemented in PHP, and if that application can be compelled to include these magic query arguments, these responses might produce undefined behavior. Would it make sense to disable any easter eggs in the Debian PHP packages, or am I being a touch too paranoid and boring?
