diff options
| author | jvoisin | 2020-12-31 19:03:10 +0100 |
|---|---|---|
| committer | jvoisin | 2020-12-31 19:03:10 +0100 |
| commit | 4fc38589cd029bf5b980b118d89f9cc870fd7828 (patch) | |
| tree | 45bef044f9c05971112520f2a89e9e3e85b9d6f0 /doc/source/features.rst | |
| parent | 07833c5f250e778afc1a7ae17f6e37ffbc10b538 (diff) | |
Mention PHP8's security features
Diffstat (limited to 'doc/source/features.rst')
| -rw-r--r-- | doc/source/features.rst | 11 |
1 files changed, 9 insertions, 2 deletions
diff --git a/doc/source/features.rst b/doc/source/features.rst index b3cdd9d..2eebc88 100644 --- a/doc/source/features.rst +++ b/doc/source/features.rst | |||
| @@ -161,8 +161,10 @@ without the need to invalidate any data. | |||
| 161 | 161 | ||
| 162 | A nice side-effect of this feature is that it will defeat various memory corruption | 162 | A nice side-effect of this feature is that it will defeat various memory corruption |
| 163 | issues related to the complexity of ``unserialize``'s implementation, | 163 | issues related to the complexity of ``unserialize``'s implementation, |
| 164 | and the amount of control if provides to an attacker, like `CVE-2016-9137, CVE-2016-9138 <https://bugs.php.net/bug.php?id=73147>`_, | 164 | and the amount of control if provides to an attacker, like `CVE-2016-9137, |
| 165 | `2016-7124 <https://bugs.php.net/bug.php?id=72663>`_, `CVE-2016-5771 and CVE-2016-5773 <https://www.evonide.com/how-we-broke-php-hacked-pornhub-and-earned-20000-dollar/>`_. | 165 | CVE-2016-9138 <https://bugs.php.net/bug.php?id=73147>`_, `2016-7124 |
| 166 | <https://bugs.php.net/bug.php?id=72663>`_, `CVE-2016-5771 and CVE-2016-5773 | ||
| 167 | <https://www.evonide.com/how-we-broke-php-hacked-pornhub-and-earned-20000-dollar/>`_. | ||
| 166 | 168 | ||
| 167 | 169 | ||
| 168 | Examples of related vulnerabilities | 170 | Examples of related vulnerabilities |
| @@ -327,6 +329,8 @@ and various other types mismatch. | |||
| 327 | This feature is largely inspired from the | 329 | This feature is largely inspired from the |
| 328 | `autostrict <https://github.com/krakjoe/autostrict>`_ module from `krakjoe <http://krakjoe.ninja>`__. | 330 | `autostrict <https://github.com/krakjoe/autostrict>`_ module from `krakjoe <http://krakjoe.ninja>`__. |
| 329 | 331 | ||
| 332 | PHP8 already has [this feature](https://wiki.php.net/rfc/consistent_type_errors) for internal functions. | ||
| 333 | |||
| 330 | 334 | ||
| 331 | .. _sloppy-comparisons-feature: | 335 | .. _sloppy-comparisons-feature: |
| 332 | 336 | ||
| @@ -349,6 +353,9 @@ but also the `in_array | |||
| 349 | <https://secure.php.net/manual/en/function.array-search.php>`__ and `array_keys | 353 | <https://secure.php.net/manual/en/function.array-search.php>`__ and `array_keys |
| 350 | <https://secure.php.net/manual/en/function.array-keys.php>`__ functions. | 354 | <https://secure.php.net/manual/en/function.array-keys.php>`__ functions. |
| 351 | 355 | ||
| 356 | PHP8 is implementing [a subset](https://wiki.php.net/rfc/consistent_type_errors) of this feature. | ||
| 357 | |||
| 358 | |||
| 352 | .. _readonly-exec-feature: | 359 | .. _readonly-exec-feature: |
| 353 | 360 | ||
| 354 | Preventing execution of writable PHP files | 361 | Preventing execution of writable PHP files |
