snuffleupagus - Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest!

Age	Commit message (Expand)	Author
2022-01-11	enable strict_mode in example config	Ben Fuhrmannek
2022-01-10	renamed ini protection example rules	Ben Fuhrmannek
2022-01-10	added conditions to ini protection example	Ben Fuhrmannek
2022-01-07	added dangerous extension check	Ben Fuhrmannek
2021-11-11	inverted logic. set xxe_protection.enable() instead of disable_xxe.disable()	Ben Fuhrmannek
2021-08-30	fixed typo	Ben Fuhrmannek
2021-08-18	ported Suhosin rules to Snuffleupagus rules	Ben Fuhrmannek
2021-08-18	updated documentation URL	Ben Fuhrmannek
2021-08-07	more ini protection features	Ben Fuhrmannek
2021-08-06	default ruleset for ini protection feature	Ben Fuhrmannek
2021-05-09	Fix disable function chmod	WhiteWinterWolf
2021-05-01	Additional PHP 8 sample config argument name changes	Tristan Deloche
2021-05-01	Improve our SQLI-related documentation and remove some useless rules	jvoisin
2021-04-27	Update some parameter names which changed for PHP 8.0	Tristan Deloche
2021-04-26	Add a configuration file for php8	jvoisin
2020-06-07	Lockdown of the logging directives	jvoisin
2020-04-25	Fix and improve the previous commit	jvoisin
2020-04-25	Add yet an other stupid things to the default set of rules	jvoisin
2020-04-24	Add yet another disabled_functions bypass	jvoisin
2019-10-16	Fix the default configuration	jvoisin
2019-04-07	Protect against a now-public open_basedir bypass	jvoisin
2019-01-16	Improve a bit the default rules	jvoisin
2018-12-25	Tighten a bit the command-injection prevention rule	jvoisin
2018-08-29	Change how we're validating certificates	xXx-caillou-xXx
2018-08-29	Verify certs (#223)	jvoisin
2018-07-23	Improve a bit the default rules	jvoisin
2018-07-23	Whitelist the inclusion of `.phtml` files	jvoisin
2018-07-23	Allow the inclusion of `.inc` files	jvoisin
2018-07-23	Use SameSite on PHP's session cookie in the default rules	jvoisin
2018-07-23	Activate more features in the default rules	jvoisin
2018-07-13	Massively optimize how rules are handled	xXx-caillou-xXx
2018-03-09	Improve the performances of our default rules	jvoisin
2018-03-09	Vastly improve our typo3 rules	jvoisin
2018-03-05	Improve a bit the performances (+10%)	jvoisin
2018-03-02	Add some rules for Typo3, courtesy of @kjojo	jvoisin
2018-02-26	Improve the previous commit	jvoisin
2018-02-26	Add a rule to prevent various sandbox escapes	jvoisin
2018-02-22	Refactor a bit our rules	jvoisin
2018-02-07	Tested two more rules for Abantecart 1.2.8 from the RIPS calendar	kjojo
2018-02-07	Add an example rule from the rips calendar for abantecart's XSS	kjojo
2018-01-17	Our configuration files are ending in .rules, not .ini	jvoisin
2017-12-27	Fix the debian package	blotus
2017-12-04	Fix the configuration parser wrt. non-matching brackets	jvoisin
2017-11-27	Archlinux pkg	xXx-caillou-xXx
2017-11-06	53 absolute path (#62)	jvoisin
2017-10-11	s/disable_functions/disable_function/g	jvoisin
2017-09-20	Initial import	Sebastien Blot