summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2018-12-01Improve the documentation wrt. functions hooked by sloppy comparisonsjvoisin
This should close #264
2018-11-29Document our curl-tls-verification magicjvoisin
2018-11-23Document a bit more the threat modeljvoisin
2018-11-18Minor code clarificationjvoisin
2018-11-18Improve the cookie encryption documentationjvoisin
This should close #261
2018-11-18Add alertot to the list of usersjvoisin
Source: https://twitter.com/alertot/status/1063366265593622528
2018-10-25Minor formatting issuejvoisin
2018-10-25Snuffleupagus should now compile on Windowsjvoisin
2018-10-23Improve a bit the documentation, againjvoisin
2018-10-23Clarify a bit the documentationjvoisin
A user was a bit afraid that Snuffleupagus might damage their website permanently, so we rephrase the documentation to convey that this is not the case.
2018-10-09Bump againjvoisin
2018-10-09Bump coveragejvoisin
2018-10-09Bump the coverage a bitjvoisin
2018-10-09Remove 3 useless linesjvoisin
2018-10-09Don't check the return values of functions that might not return (#255)jvoisin
This is due to our modifications to the logging system
2018-10-09Improve mb_string hooking logicjvoisin
2018-10-08Add a testjvoisin
2018-10-07Document the `.pos` filterjvoisin
2018-10-06Add a missing opcode in sp_execute_exjvoisin
2018-10-06Coverage++jvoisin
2018-10-06Bump coverage againjvoisin
2018-10-06Bump coverage againjvoisin
2018-10-06Fix the silly mistake for goodjvoisin
2018-10-06Improve a bit the documentationjvoisin
Thanks to @joe for bringing up this issue ♥
2018-10-06Fix a silly mistakejvoisin
2018-10-06Add a testjvoisin
2018-10-06Bump a bit the coveragejvoisin
* `setcookie` doesn't always return `true` anymore * clang-format * Cookies with invalid decryption are dropped, but the request isn't anymore * faulty unserialize are now dumpable
2018-10-06Remove sp_terminate and bump a bit the coveragejvoisin
2018-10-05Fix segfault array keyskkadosh
Many thanks to @xXx-caillou-xXx for finding the true root cause and fixing the issue ♥
2018-09-13Add a .mailmap filejvoisin
Check `git shortlog` with and without this file.
2018-09-13Add the 44con's slides in the documentationjvoisin
2018-09-13Add the 44con slidesjvoisin
2018-09-10Minor code simplificationjvoisin
2018-09-10Improve a bit the coveragejvoisin
2018-09-10Bump the coveragejvoisin
2018-09-10Try to improve a bit the display of the CIjvoisin
2018-09-03Add a const attribute, added in 7.3Remi Collet
2018-09-03Fix #241 segfault on 32-bit related to bad protype (#242)Remi Collet
This should close #241
2018-09-01Add mentions to the propaganda pagejvoisin
2018-09-01Use php full pathRemi Collet
Use the PHP_BINARY constant instead of "php".
2018-08-31Bump the changelogv0.4.0jvoisin
2018-08-30Minor code cleanupxXx-caillou-xXx
2018-08-30Change how we're handling invalid configurationsxXx-caillou-xXx
Since our configuration format is a bit more complex than php's one, we have a `sp.allow_broken_configuration` parameter (`false` by default), that you can set to `true` if you want PHP to carry on if your Snuffleupagus' configuration contains syntax errors. You'll still get a big scary message in your logs of course. We do **not** recommend to use it of course, but sometimes it might be useful to be able to "debug in production" without breaking your website.
2018-08-30Match on ret improvementsxXx-caillou-xXx
This commit does two things: - Implement matching on calltraces for ret - Implement matching on ret of user functions if the return value is not used.
2018-08-30Fix two typos in the readmeMathieu Deous
2018-08-29Change how we're validating certificatesxXx-caillou-xXx
2018-08-29Add new propaganda items, include ourselves and swisscenterThibault "bui" Koechlin
2018-08-29Remove the GLOB_BRACE flagAntoine Tenart
When calling glob() to get the configuration file location, the GLOB_BRACE flag is used. This flag enables the parsing of '{a,b}', so that '/path/{a,b}' represents '/path/a' and '/path/b'. Looking at Snuffleupagus' documentation I saw nowhere this kind of path was supported. Instead the documentation shows that glob() is used for paths with wildcards. The use of GLOB_BRACE is problematic as it is glibc specific and is not supported by some other C libraries, such as Musl. Snuffleupagus cannot be used in Apline for this reason. Since the documentation does not give a valid usage of GLOB_BRACE this patch removes it, which fixes the non-glibc support. Signed-off-by: Antoine Tenart <antoine.tenart@ack.tf>
2018-08-29Verify certs (#223)jvoisin
Ensure that certificates are verified in curl should close #47
2018-08-28Fix some compilation warningsxXx-caillou-xXx