| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2018-01-15 | Fix an other off-by-one | jvoisin | |
| 2018-01-15 | Fix an off-by-one | jvoisin | |
| 2018-01-15 | Fix some memleaks | jvoisin | |
| 2018-01-15 | Minor code cleanup | jvoisin | |
| 2018-01-15 | Add a note about session cookies handling. | jvoisin | |
| 2018-01-12 | Refactor to improve the scoping | jvoisin | |
| 2018-01-12 | Fix a memory leak | jvoisin | |
| 2018-01-12 | Minor factorization and symbol exposure reduction | jvoisin | |
| 2018-01-12 | Minor refactoring | jvoisin | |
| 2018-01-12 | do not prepend $ to the var name if there is one already | Sebastien Blot | |
| 2018-01-12 | Add an ugly hack to our parser to make the writing of configuration rules ↵ | jvoisin | |
| more obvious. | |||
| 2018-01-12 | Massive overhaul of the documentation | jvoisin | |
| 2018-01-12 | Improve a bit the documentation | jvoisin | |
| 2018-01-11 | Remove some legacy code | jvoisin | |
| 2018-01-10 | Rework the priority of bl/wl in eval | jvoisin | |
| 2018-01-10 | Minor constification | jvoisin | |
| 2018-01-10 | Eval whitelist | jvoisin | |
| Implement whitelist in eval | |||
| 2018-01-08 | Hopefully fix a crash | jvoisin | |
| This should close #115 | |||
| 2018-01-08 | Add a test to see what happens when no configuration file is given | jvoisin | |
| 2018-01-06 | Ignore a test when running the testsuite as root | jvoisin | |
| 2018-01-05 | Fix a bypass in our eval blacklist | jvoisin | |
| 2018-01-04 | Eval blacklist | jvoisin | |
| Add support for eval filtering, only blacklist for now | |||
| 2018-01-04 | Bump a bit the coverage | jvoisin | |
| 2018-01-03 | Handle correctly configuration files with Windows EOL | jvoisin | |
| Thanks to @fr33tux for the bug report ♥ | |||
| 2018-01-03 | Merge pull request #110 from nbs-system/document_debug | Thibault "bui" Koechlin | |
| Document how to debug Snuffleupagus, specifically providing a stacktrace | |||
| 2018-01-03 | Remove some dead code | jvoisin | |
| 2018-01-03 | Update debug.rst | Thibault "bui" Koechlin | |
| 2018-01-03 | syntax | Thibault "bui" Koechlin | |
| 2018-01-03 | Document how to debug Snuffleupagus | jvoisin | |
| 2018-01-03 | Add a twitter badge | jvoisin | |
| 2018-01-02 | Remove some useless code in the testsuite | jvoisin | |
| 2017-12-29 | Fix two broken tests | jvoisin | |
| 2017-12-28 | Add two test to prove that we're not prone to old-school bypasses | jvoisin | |
| 2017-12-28 | Bump again the coverage | jvoisin | |
| 2017-12-28 | Clang-format pass | Thibault "bui" Koechlin | |
| - `clang-format --style="{BasedOnStyle: google, SortIncludes: false}" -i snuffleu*.c sp_*.c sp_*.h` - Update the documentation accordingly | |||
| 2017-12-28 | Show in the phpinfo() is the config is valid | jvoisin | |
| This should close #39 | |||
| 2017-12-28 | Fix a non-working test | jvoisin | |
| 2017-12-28 | Bump a bit the coverage | jvoisin | |
| 2017-12-28 | re-integrate simulation token for cookies | bui | |
| 2017-12-28 | Implement regexp support for cookies encryption | Thibault "bui" Koechlin | |
| It's now possible to encrypt cookies matching a specific regexp. This should close #106 | |||
| 2017-12-28 | Add two tests to verify that we can hook indirect calls | jvoisin | |
| This should close #104 | |||
| 2017-12-28 | Implement hooking on user-defined functions return values | jvoisin | |
| This should close #99, thanks to @blotus for the implementation idea! | |||
| 2017-12-27 | Minor documentation improvement | jvoisin | |
| 2017-12-27 | Implement simulation mode for cookies (de/en)cryption | jvoisin | |
| This should close #102 This commit can be useful for two use-cases: 1. When deploying Snuffleupagus on big CMS like Magento, and not knowing what cookies are modified via javascript. 2. When deploying Snuffleupagus on big websites: you don't want to disconnect every single user at once. When simulation is enabled, if the decryption fails, a log message is now issued, and the cookie value taken as it (since odds are that it's non-encrypted). | |||
| 2017-12-27 | Fix the debian package | blotus | |
| Add a default ini file to enable snuffleupagus to the debian package | |||
| 2017-12-26 | Improve the portability of our ipv6 support | jvoisin | |
| Apparently, the in6_addr can have different fields in its union, making it a bit non-portable. We're solving this via macros. This should close #100, thanks to @fichtner for the report ♥ | |||
| 2017-12-26 | Add a link to a blogpost | jvoisin | |
| 2017-12-26 | Add a link to our blackalps talk | jvoisin | |
| 2017-12-22 | Fix a typo spotted by @xxx-caillou-xxx | jvoisin | |
| 2017-12-21 | Mention the release in the changelog | jvoisin | |
 |
index : snuffleupagus | |
| Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest! |
| summaryrefslogtreecommitdiff |