diff options
| author | Mathieu Deous | 2018-08-30 14:30:43 +0200 |
|---|---|---|
| committer | jvoisin | 2018-08-30 12:30:43 +0000 |
| commit | dcc64e0f1530fbe5d528873977199ceeb715305d (patch) | |
| tree | db2f2cfa1ac5306fc06a71581f927652a44fcfa6 /README.md | |
| parent | 89e859d09248de6b1b9b9cdd652cb72c9f7ff098 (diff) | |
Fix two typos in the readme
Diffstat (limited to 'README.md')
| -rw-r--r-- | README.md | 4 |
1 files changed, 2 insertions, 2 deletions
| @@ -55,7 +55,7 @@ without having to touch the PHP code. | |||
| 55 | 55 | ||
| 56 | * Close to zero performance impact | 56 | * Close to zero performance impact |
| 57 | * Powerful yet simple to write virtual-patching rules | 57 | * Powerful yet simple to write virtual-patching rules |
| 58 | * Killing several classes for vulnerabilities | 58 | * Killing several classes of vulnerabilities |
| 59 | * [Unserialize-based](https://www.owasp.org/images/9/9e/Utilizing-Code-Reuse-Or-Return-Oriented-Programming-In-PHP-Application-Exploits.pdf) code execution | 59 | * [Unserialize-based](https://www.owasp.org/images/9/9e/Utilizing-Code-Reuse-Or-Return-Oriented-Programming-In-PHP-Application-Exploits.pdf) code execution |
| 60 | * [`mail`-based]( https://blog.ripstech.com/2016/roundcube-command-execution-via-email/ ) code execution | 60 | * [`mail`-based]( https://blog.ripstech.com/2016/roundcube-command-execution-via-email/ ) code execution |
| 61 | * Cookie-stealing [XSS]( https://en.wikipedia.org/wiki/Cross-site_scripting ) | 61 | * Cookie-stealing [XSS]( https://en.wikipedia.org/wiki/Cross-site_scripting ) |
| @@ -64,7 +64,7 @@ without having to touch the PHP code. | |||
| 64 | * [XXE]( https://en.wikipedia.org/wiki/XML_external_entity_attack ) | 64 | * [XXE]( https://en.wikipedia.org/wiki/XML_external_entity_attack ) |
| 65 | * Hardening features | 65 | * Hardening features |
| 66 | * Automatic `secure` and `samesite` flag for cookies | 66 | * Automatic `secure` and `samesite` flag for cookies |
| 67 | * Bundled set of rule to detect post-compromissions behaviours | 67 | * Bundled set of rules to detect post-compromissions behaviours |
| 68 | * Global [strict mode]( https://secure.php.net/manual/en/migration70.new-features.php#migration70.new-features.scalar-type-declarations) and type-juggling prevention | 68 | * Global [strict mode]( https://secure.php.net/manual/en/migration70.new-features.php#migration70.new-features.scalar-type-declarations) and type-juggling prevention |
| 69 | * Whitelisting of [stream wrappers](https://secure.php.net/manual/en/intro.stream.php) | 69 | * Whitelisting of [stream wrappers](https://secure.php.net/manual/en/intro.stream.php) |
| 70 | * Preventing writeable files execution | 70 | * Preventing writeable files execution |