3 ms·

PHP was included with macOS? Wasn't that a huge security risk? Normally you try to keep a system as small as possible, especially regarding scripting languages

• detaro 5y ago
  I doubt any attacker is going to think "oh no, no PHP here, going to have to use Python!". If your security relies on not having an interpreter installed, something is badly wrong.
• astrange 5y ago
  Script execution is blocked by default unless you turn off Gatekeeper.
• gregoriol 5y ago
  It was often a not up-to-date version and not updatable without a macOS update, but it wasn't used much, or even at all: I don't know any system script that would use it, and any web developer would use another setup anyway. So since it's not used (in a webserver for example), it's not as much more a risk than shell scripts I guess.
• slver 5y ago
  Security risk no. But it's a maintenance mess to have bunch of runtimes sitting around for no great reason.