summaryrefslogtreecommitdiff
path: root/doc/source/features.rst
diff options
context:
space:
mode:
Diffstat (limited to 'doc/source/features.rst')
-rw-r--r--doc/source/features.rst4
1 files changed, 2 insertions, 2 deletions
diff --git a/doc/source/features.rst b/doc/source/features.rst
index 407b9c7..0c23dc1 100644
--- a/doc/source/features.rst
+++ b/doc/source/features.rst
@@ -73,7 +73,7 @@ Like *Suhosin*, we are encrypting the cookies with a secret key,
73an environment variable (usually the IP of the user) 73an environment variable (usually the IP of the user)
74and the user's user-agent. This means that an attacker with an XSS won't be able to use 74and the user's user-agent. This means that an attacker with an XSS won't be able to use
75the stolen cookie, since he can't spoof the content of the value of the environment 75the stolen cookie, since he can't spoof the content of the value of the environment
76variable for the user. Please do read the :ref:`documentation about this feature <config_cookie-encryption>` 76variable for the user. Please do read the :ref:`documentation about this feature <cookie-encryption-page>`
77if you're planning to use it. 77if you're planning to use it.
78 78
79This feature is roughly the same than the `Suhosin one <https://suhosin.org/stories/configuration.html#transparent-encryption-options>`_. 79This feature is roughly the same than the `Suhosin one <https://suhosin.org/stories/configuration.html#transparent-encryption-options>`_.
@@ -444,7 +444,7 @@ or ``is_callable`` with *suspicious* parameters.
444Some PHP applications are using broad rights when using the ``chmod`` function, 444Some PHP applications are using broad rights when using the ``chmod`` function,
445like the infamous ``chmod(777)`` command, effectively making the file writable by everyone. 445like the infamous ``chmod(777)`` command, effectively making the file writable by everyone.
446Snuffleupagus is preventing this kind of behaviour by restricting the parameters 446Snuffleupagus is preventing this kind of behaviour by restricting the parameters
447than can be passed to ``chmod``. 447that can be passed to ``chmod``.
448 448
449Arbitrary file inclusion hardening 449Arbitrary file inclusion hardening
450"""""""""""""""""""""""""""""""""" 450""""""""""""""""""""""""""""""""""