diff options
Diffstat (limited to 'doc/source/features.rst')
| -rw-r--r-- | doc/source/features.rst | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/doc/source/features.rst b/doc/source/features.rst index 407b9c7..0c23dc1 100644 --- a/doc/source/features.rst +++ b/doc/source/features.rst | |||
| @@ -73,7 +73,7 @@ Like *Suhosin*, we are encrypting the cookies with a secret key, | |||
| 73 | an environment variable (usually the IP of the user) | 73 | an environment variable (usually the IP of the user) |
| 74 | and the user's user-agent. This means that an attacker with an XSS won't be able to use | 74 | and the user's user-agent. This means that an attacker with an XSS won't be able to use |
| 75 | the stolen cookie, since he can't spoof the content of the value of the environment | 75 | the stolen cookie, since he can't spoof the content of the value of the environment |
| 76 | variable for the user. Please do read the :ref:`documentation about this feature <config_cookie-encryption>` | 76 | variable for the user. Please do read the :ref:`documentation about this feature <cookie-encryption-page>` |
| 77 | if you're planning to use it. | 77 | if you're planning to use it. |
| 78 | 78 | ||
| 79 | This feature is roughly the same than the `Suhosin one <https://suhosin.org/stories/configuration.html#transparent-encryption-options>`_. | 79 | This feature is roughly the same than the `Suhosin one <https://suhosin.org/stories/configuration.html#transparent-encryption-options>`_. |
| @@ -444,7 +444,7 @@ or ``is_callable`` with *suspicious* parameters. | |||
| 444 | Some PHP applications are using broad rights when using the ``chmod`` function, | 444 | Some PHP applications are using broad rights when using the ``chmod`` function, |
| 445 | like the infamous ``chmod(777)`` command, effectively making the file writable by everyone. | 445 | like the infamous ``chmod(777)`` command, effectively making the file writable by everyone. |
| 446 | Snuffleupagus is preventing this kind of behaviour by restricting the parameters | 446 | Snuffleupagus is preventing this kind of behaviour by restricting the parameters |
| 447 | than can be passed to ``chmod``. | 447 | that can be passed to ``chmod``. |
| 448 | 448 | ||
| 449 | Arbitrary file inclusion hardening | 449 | Arbitrary file inclusion hardening |
| 450 | """""""""""""""""""""""""""""""""" | 450 | """""""""""""""""""""""""""""""""" |
