| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2018-10-06 | Bump coverage again | jvoisin | |
| 2018-10-06 | Fix the silly mistake for good | jvoisin | |
| 2018-10-06 | Improve a bit the documentation | jvoisin | |
| Thanks to @joe for bringing up this issue ♥ | |||
| 2018-10-06 | Fix a silly mistake | jvoisin | |
| 2018-10-06 | Add a test | jvoisin | |
| 2018-10-06 | Bump a bit the coverage | jvoisin | |
| * `setcookie` doesn't always return `true` anymore * clang-format * Cookies with invalid decryption are dropped, but the request isn't anymore * faulty unserialize are now dumpable | |||
| 2018-10-06 | Remove sp_terminate and bump a bit the coverage | jvoisin | |
| 2018-10-05 | Fix segfault array keys | kkadosh | |
| Many thanks to @xXx-caillou-xXx for finding the true root cause and fixing the issue ♥ | |||
| 2018-09-13 | Add a .mailmap file | jvoisin | |
| Check `git shortlog` with and without this file. | |||
| 2018-09-13 | Add the 44con's slides in the documentation | jvoisin | |
| 2018-09-13 | Add the 44con slides | jvoisin | |
| 2018-09-10 | Minor code simplification | jvoisin | |
| 2018-09-10 | Improve a bit the coverage | jvoisin | |
| 2018-09-10 | Bump the coverage | jvoisin | |
| 2018-09-10 | Try to improve a bit the display of the CI | jvoisin | |
| 2018-09-03 | Add a const attribute, added in 7.3 | Remi Collet | |
| 2018-09-03 | Fix #241 segfault on 32-bit related to bad protype (#242) | Remi Collet | |
| This should close #241 | |||
| 2018-09-01 | Add mentions to the propaganda page | jvoisin | |
| 2018-09-01 | Use php full path | Remi Collet | |
| Use the PHP_BINARY constant instead of "php". | |||
| 2018-08-31 | Bump the changelogv0.4.0 | jvoisin | |
| 2018-08-30 | Minor code cleanup | xXx-caillou-xXx | |
| 2018-08-30 | Change how we're handling invalid configurations | xXx-caillou-xXx | |
| Since our configuration format is a bit more complex than php's one, we have a `sp.allow_broken_configuration` parameter (`false` by default), that you can set to `true` if you want PHP to carry on if your Snuffleupagus' configuration contains syntax errors. You'll still get a big scary message in your logs of course. We do **not** recommend to use it of course, but sometimes it might be useful to be able to "debug in production" without breaking your website. | |||
| 2018-08-30 | Match on ret improvements | xXx-caillou-xXx | |
| This commit does two things: - Implement matching on calltraces for ret - Implement matching on ret of user functions if the return value is not used. | |||
| 2018-08-30 | Fix two typos in the readme | Mathieu Deous | |
| 2018-08-29 | Change how we're validating certificates | xXx-caillou-xXx | |
| 2018-08-29 | Add new propaganda items, include ourselves and swisscenter | Thibault "bui" Koechlin | |
| 2018-08-29 | Remove the GLOB_BRACE flag | Antoine Tenart | |
| When calling glob() to get the configuration file location, the GLOB_BRACE flag is used. This flag enables the parsing of '{a,b}', so that '/path/{a,b}' represents '/path/a' and '/path/b'. Looking at Snuffleupagus' documentation I saw nowhere this kind of path was supported. Instead the documentation shows that glob() is used for paths with wildcards. The use of GLOB_BRACE is problematic as it is glibc specific and is not supported by some other C libraries, such as Musl. Snuffleupagus cannot be used in Apline for this reason. Since the documentation does not give a valid usage of GLOB_BRACE this patch removes it, which fixes the non-glibc support. Signed-off-by: Antoine Tenart <antoine.tenart@ack.tf> | |||
| 2018-08-29 | Verify certs (#223) | jvoisin | |
| Ensure that certificates are verified in curl should close #47 | |||
| 2018-08-28 | Fix some compilation warnings | xXx-caillou-xXx | |
| 2018-08-28 | Fix a SIGSEGV on user-created function's return value | xXx-caillou-xXx | |
| 2018-08-28 | Add array_search and array_keys hooks to kill sloppy comparisons | xXx-caillou-xXx | |
| 2018-08-28 | Add a test for invalid regexp in cookie-related features | xXx-caillou-xXx | |
| This should close #105 | |||
| 2018-08-28 | Use php's logging functions | xXx-caillou-xXx | |
| This commit replace our usage of `php_log_err` with `zend_error`. This should allow administrators to display errors in the webpage, should they want to; and to properly manipulate the verbosity's level. This should close #217 | |||
| 2018-08-28 | Document some features in our README | jvoisin | |
| 2018-08-28 | Add a test for sloppy-comparisons in arrays | jvoisin | |
| 2018-08-27 | Enable strict mode for `in_array` with sloppy_comparison | xXx-caillou-xXx | |
| 2018-08-27 | Document that the previous commit might break other cookie-related extensions | jvoisin | |
| 2018-08-27 | Use php_setcookie function (PHP public API) | Remi Collet | |
| This commit vastly simplifies the code of cookies-fiddling mechanisms. | |||
| 2018-08-27 | Add whitelist support for php's wrappers | xXx-caillou-xXx | |
| 2018-08-27 | Modify test for callback functions | xXx-caillou-xXx | |
| close #171 | |||
| 2018-08-27 | Fix the `make install` | jvoisin | |
| 2018-08-23 | Fix a typo in a link | jvoisin | |
| 2018-08-23 | Add some articles to the propaganda page | jvoisin | |
| 2018-08-21 | Fix a link | jvoisin | |
| 2018-08-21 | Document our type-juggling-prevention system | jvoisin | |
| 2018-08-20 | Add test for params matching | xXx-caillou-xXx | |
| 2018-08-20 | Bump the changlogv0.3.1 | hamza (hes) ES SAHELY | |
| 2018-08-20 | Fix two minor issues | xXx-caillou-xXx | |
| - Fix an infinite loop on `echo` hook - Use the correct function to compare filenames internally | |||
| 2018-08-17 | Add ignore hash feature in `generate_rules.php` (#208) | xXx-caillou-xXx | |
| https://github.com/nbs-system/snuffleupagus/issues/206 | |||
| 2018-08-09 | Fix yet an other hang/crash | jvoisin | |
| There are valid reasons for `orig_zend_execute_internal` to be `NULL`, we we're not checking if it is, well, `NULL`. | |||
 |
index : snuffleupagus | |
| Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest! |
| summaryrefslogtreecommitdiff |