summaryrefslogtreecommitdiff
path: root/doc/source/features.rst
diff options
context:
space:
mode:
authorjvoisin2020-12-31 19:03:10 +0100
committerjvoisin2020-12-31 19:03:10 +0100
commit4fc38589cd029bf5b980b118d89f9cc870fd7828 (patch)
tree45bef044f9c05971112520f2a89e9e3e85b9d6f0 /doc/source/features.rst
parent07833c5f250e778afc1a7ae17f6e37ffbc10b538 (diff)
Mention PHP8's security features
Diffstat (limited to 'doc/source/features.rst')
-rw-r--r--doc/source/features.rst11
1 files changed, 9 insertions, 2 deletions
diff --git a/doc/source/features.rst b/doc/source/features.rst
index b3cdd9d..2eebc88 100644
--- a/doc/source/features.rst
+++ b/doc/source/features.rst
@@ -161,8 +161,10 @@ without the need to invalidate any data.
161 161
162A nice side-effect of this feature is that it will defeat various memory corruption 162A nice side-effect of this feature is that it will defeat various memory corruption
163issues related to the complexity of ``unserialize``'s implementation, 163issues related to the complexity of ``unserialize``'s implementation,
164and the amount of control if provides to an attacker, like `CVE-2016-9137, CVE-2016-9138 <https://bugs.php.net/bug.php?id=73147>`_, 164and the amount of control if provides to an attacker, like `CVE-2016-9137,
165`2016-7124 <https://bugs.php.net/bug.php?id=72663>`_, `CVE-2016-5771 and CVE-2016-5773 <https://www.evonide.com/how-we-broke-php-hacked-pornhub-and-earned-20000-dollar/>`_. 165CVE-2016-9138 <https://bugs.php.net/bug.php?id=73147>`_, `2016-7124
166<https://bugs.php.net/bug.php?id=72663>`_, `CVE-2016-5771 and CVE-2016-5773
167<https://www.evonide.com/how-we-broke-php-hacked-pornhub-and-earned-20000-dollar/>`_.
166 168
167 169
168Examples of related vulnerabilities 170Examples of related vulnerabilities
@@ -327,6 +329,8 @@ and various other types mismatch.
327This feature is largely inspired from the 329This feature is largely inspired from the
328`autostrict <https://github.com/krakjoe/autostrict>`_ module from `krakjoe <http://krakjoe.ninja>`__. 330`autostrict <https://github.com/krakjoe/autostrict>`_ module from `krakjoe <http://krakjoe.ninja>`__.
329 331
332PHP8 already has [this feature](https://wiki.php.net/rfc/consistent_type_errors) for internal functions.
333
330 334
331.. _sloppy-comparisons-feature: 335.. _sloppy-comparisons-feature:
332 336
@@ -349,6 +353,9 @@ but also the `in_array
349<https://secure.php.net/manual/en/function.array-search.php>`__ and `array_keys 353<https://secure.php.net/manual/en/function.array-search.php>`__ and `array_keys
350<https://secure.php.net/manual/en/function.array-keys.php>`__ functions. 354<https://secure.php.net/manual/en/function.array-keys.php>`__ functions.
351 355
356PHP8 is implementing [a subset](https://wiki.php.net/rfc/consistent_type_errors) of this feature.
357
358
352.. _readonly-exec-feature: 359.. _readonly-exec-feature:
353 360
354Preventing execution of writable PHP files 361Preventing execution of writable PHP files