diff options
| author | WhiteWinterWolf | 2021-05-09 18:56:38 +0200 |
|---|---|---|
| committer | GitHub | 2021-05-09 16:56:38 +0000 |
| commit | ec67149705739f9c13dc1f5dee335768cab3d7a0 (patch) | |
| tree | 0dd5e1b8ad7326020f27a32c1f8442f53c752bf7 /config/default_php8.rules | |
| parent | 49d1664cd3708482c954ef4ffdddc54d3e7cbcf0 (diff) | |
Fix disable function chmod
Diffstat (limited to 'config/default_php8.rules')
| -rw-r--r-- | config/default_php8.rules | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/config/default_php8.rules b/config/default_php8.rules index 893bfbc..c024176 100644 --- a/config/default_php8.rules +++ b/config/default_php8.rules | |||
| @@ -34,8 +34,9 @@ sp.disable_xxe.enable(); | |||
| 34 | # https://snuffleupagus.readthedocs.io/features.html#protection-against-cross-site-request-forgery | 34 | # https://snuffleupagus.readthedocs.io/features.html#protection-against-cross-site-request-forgery |
| 35 | sp.cookie.name("PHPSESSID").samesite("lax"); | 35 | sp.cookie.name("PHPSESSID").samesite("lax"); |
| 36 | 36 | ||
| 37 | # Harden the `chmod` function | 37 | # Harden the `chmod` function (0777 (oct = 511, 0666 = 438) |
| 38 | sp.disable_function.function("chmod").param("permissions").value_r("^[0-9]{2}[67]$").drop(); | 38 | sp.disable_function.function("chmod").param("permissions").value("438").drop(); |
| 39 | sp.disable_function.function("chmod").param("permissions").value("511").drop(); | ||
| 39 | 40 | ||
| 40 | # Prevent various `mail`-related vulnerabilities | 41 | # Prevent various `mail`-related vulnerabilities |
| 41 | sp.disable_function.function("mail").param("additional_parameters").value_r("\\-").drop(); | 42 | sp.disable_function.function("mail").param("additional_parameters").value_r("\\-").drop(); |