diff options
Diffstat (limited to 'doc/source')
| -rw-r--r-- | doc/source/config.rst | 11 | ||||
| -rw-r--r-- | doc/source/features.rst | 15 |
2 files changed, 0 insertions, 26 deletions
diff --git a/doc/source/config.rst b/doc/source/config.rst index d89d7f5..e209ecb 100644 --- a/doc/source/config.rst +++ b/doc/source/config.rst | |||
| @@ -202,17 +202,6 @@ to explicitly whitelist some `stream wrappers <https://secure.php.net/manual/en/ | |||
| 202 | sp.wrappers_whitelist.list("file,php,phar"); | 202 | sp.wrappers_whitelist.list("file,php,phar"); |
| 203 | 203 | ||
| 204 | 204 | ||
| 205 | Mandatory certificates validation | ||
| 206 | ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ | ||
| 207 | |||
| 208 | :ref:`Mandatory certificate validation <mandatory-cert-validation>` ensures | ||
| 209 | that it's not possible to turn off certificate validation for `cURL usage <https://secure.php.net/manual/en/book.curl.php>`__. | ||
| 210 | |||
| 211 | :: | ||
| 212 | |||
| 213 | sp.curl_verify_certificates.enable(); | ||
| 214 | |||
| 215 | |||
| 216 | Eval white and blacklist | 205 | Eval white and blacklist |
| 217 | ^^^^^^^^^^^^^^^^^^^^^^^^ | 206 | ^^^^^^^^^^^^^^^^^^^^^^^^ |
| 218 | 207 | ||
diff --git a/doc/source/features.rst b/doc/source/features.rst index f676468..540e982 100644 --- a/doc/source/features.rst +++ b/doc/source/features.rst | |||
| @@ -344,21 +344,6 @@ Snuffleupagus can prevent the execution of this kind of file. A good practice | |||
| 344 | would be to use a different user to run PHP than for administrating the website, | 344 | would be to use a different user to run PHP than for administrating the website, |
| 345 | and using this feature to lock this up. | 345 | and using this feature to lock this up. |
| 346 | 346 | ||
| 347 | |||
| 348 | .. _mandatory-cert-validation: | ||
| 349 | |||
| 350 | Mandatory certificates validation | ||
| 351 | ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ | ||
| 352 | |||
| 353 | It's a common practise to disable `certificate validation <https://en.wikipedia.org/wiki/Transport_Layer_Security>`__ | ||
| 354 | during development for convenience's sake. Unfortunately, it's equally common | ||
| 355 | to forget to turn it back on. | ||
| 356 | |||
| 357 | Snuffleupagus can prevent php code from turning off certificate validation | ||
| 358 | for anything `cURL <https://secure.php.net/manual/en/book.curl.php>`__-based. | ||
| 359 | |||
| 360 | |||
| 361 | |||
| 362 | .. _stream-wrapper-whitelist-feature: | 347 | .. _stream-wrapper-whitelist-feature: |
| 363 | 348 | ||
| 364 | Whitelist of stream-wrappers | 349 | Whitelist of stream-wrappers |
