<feed xmlns='http://www.w3.org/2005/Atom'>
<title>snuffleupagus/src/tests/encrypt_cookies_invalid_decryption_simulation.phpt, branch v0.2.2</title>
<subtitle>Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest! 
</subtitle>
<id>http://git.dustri.org/snuffleupagus/atom?h=v0.2.2</id>
<link rel='self' href='http://git.dustri.org/snuffleupagus/atom?h=v0.2.2'/>
<link rel='alternate' type='text/html' href='http://git.dustri.org/snuffleupagus/'/>
<updated>2017-12-27T14:43:33Z</updated>
<entry>
<title>Implement simulation mode for cookies (de/en)cryption</title>
<updated>2017-12-27T14:43:33Z</updated>
<author>
<name>jvoisin</name>
</author>
<published>2017-12-27T14:43:33Z</published>
<link rel='alternate' type='text/html' href='http://git.dustri.org/snuffleupagus/commit/?id=4fafa8ae5a7bcd700f368bbe6016e0b0fb2cc892'/>
<id>urn:sha1:4fafa8ae5a7bcd700f368bbe6016e0b0fb2cc892</id>
<content type='text'>
This should close #102

This commit can be useful for two use-cases:

1. When deploying Snuffleupagus on big CMS like Magento, and not knowing
   what cookies are modified via javascript.
2. When deploying Snuffleupagus on big websites: you don't want to disconnect
   every single user at once.

When simulation is enabled, if the decryption fails, a log message is
now issued, and the cookie value taken as it (since odds are that it's
non-encrypted).
</content>
</entry>
</feed>
