summaryrefslogtreecommitdiff
path: root/doc/source/features.rst
diff options
context:
space:
mode:
authorxXx-caillou-xXx2018-08-29 18:09:51 +0200
committerjvoisin2018-08-29 16:09:51 +0000
commit89e859d09248de6b1b9b9cdd652cb72c9f7ff098 (patch)
treef24c9e82da5bede181607903fb4e98f59210a057 /doc/source/features.rst
parent10552296658a87e59b60a20214fef1902320d390 (diff)
Change how we're validating certificates
Diffstat (limited to 'doc/source/features.rst')
-rw-r--r--doc/source/features.rst15
1 files changed, 0 insertions, 15 deletions
diff --git a/doc/source/features.rst b/doc/source/features.rst
index f676468..540e982 100644
--- a/doc/source/features.rst
+++ b/doc/source/features.rst
@@ -344,21 +344,6 @@ Snuffleupagus can prevent the execution of this kind of file. A good practice
344would be to use a different user to run PHP than for administrating the website, 344would be to use a different user to run PHP than for administrating the website,
345and using this feature to lock this up. 345and using this feature to lock this up.
346 346
347
348.. _mandatory-cert-validation:
349
350Mandatory certificates validation
351^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
352
353It's a common practise to disable `certificate validation <https://en.wikipedia.org/wiki/Transport_Layer_Security>`__
354during development for convenience's sake. Unfortunately, it's equally common
355to forget to turn it back on.
356
357Snuffleupagus can prevent php code from turning off certificate validation
358for anything `cURL <https://secure.php.net/manual/en/book.curl.php>`__-based.
359
360
361
362.. _stream-wrapper-whitelist-feature: 347.. _stream-wrapper-whitelist-feature:
363 348
364Whitelist of stream-wrappers 349Whitelist of stream-wrappers