Add option to specify the allowed "php" wrapper types

In addition of the current possibility to filter wrappers by their
protocol name, also add the option to filter the "php" wrapper by the
requested kind.
Especially the 'filter' backend can be disabled that way.

1 files changed, 2 insertions, 0 deletions

diff --git a/config/default_php8.rules b/config/default_php8.rules
index 98cc0db..096f033 100644
--- a/config/default_php8.rules
+++ b/config/default_php8.rules
@@ -26,6 +26,8 @@ sp.xxe_protection.enable();
 # PHP has a lot of wrappers, most of them aren't usually useful, you should
 # only enable the ones you're using.
 # sp.wrappers_whitelist.list("file,php,phar");
+# The "php" wrapper can be further filtered
+# sp.wrappers_whitelist.php_list("stdout,stdin,stderr");
 
 # Prevent sloppy comparisons.
 # sp.sloppy_comparison.enable();