diff options
Diffstat (limited to 'config')
| -rw-r--r-- | config/default_php8.rules | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/config/default_php8.rules b/config/default_php8.rules index 096f033..a6edfbe 100644 --- a/config/default_php8.rules +++ b/config/default_php8.rules | |||
| @@ -26,7 +26,7 @@ sp.xxe_protection.enable(); | |||
| 26 | # PHP has a lot of wrappers, most of them aren't usually useful, you should | 26 | # PHP has a lot of wrappers, most of them aren't usually useful, you should |
| 27 | # only enable the ones you're using. | 27 | # only enable the ones you're using. |
| 28 | # sp.wrappers_whitelist.list("file,php,phar"); | 28 | # sp.wrappers_whitelist.list("file,php,phar"); |
| 29 | # The "php" wrapper can be further filtered | 29 | # The "php" wrapper can be further filtered, e.g. to only allow `php://stdout`, `php://stdin` and `php://stderr`: |
| 30 | # sp.wrappers_whitelist.php_list("stdout,stdin,stderr"); | 30 | # sp.wrappers_whitelist.php_list("stdout,stdin,stderr"); |
| 31 | 31 | ||
| 32 | # Prevent sloppy comparisons. | 32 | # Prevent sloppy comparisons. |
