; php2shell mitigation (CVE-2026-109618 / CVE-2026-109619, GHSA-w8hw-w9fx-j79w, GHSA-6wmf-4rv5-p3rp) ; Remove once all images ship PHP >= 8.2.35 / 8.3.36 / 8.4.27 / 8.5.12. fatal_error_backtraces = 0 session.upload_progress.enabled = 0 max_input_nesting_level = 16