snuffleupagus - Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest!

Age	Commit message (Collapse)	Author
2020-11-06	Bump the changelogv0.6.0	jvoisin

2020-10-27	Fix some slides links	jvoisin

2020-10-27	Fix some download links	jvoisin

2020-07-06	Fix a warning in the documentation	jvoisin

2020-07-06	Improve a bit the previous commit	jvoisin

2020-07-05	Document how to install Snuffleupagus on Heroku	Chris Lin
	REF: #336
2020-07-04	Add two articles to the propaganda page	jvoisin

2020-06-26	Add two articles to the propaganda section	jvoisin

2020-06-26	Fix the footer in the documentation wrt. copyright	jvoisin

2020-06-20	Bump the changelogv0.5.1	jvoisin

2020-06-09	Improve the documentation wrt. "modifiers"	jvoisin

2020-06-07	Fix a link in the documentation	jvoisin
	Instead of linking to an intermediary page, link directly to the cookie's one.
2020-04-14	Typofix s/than/that/	Travis Paul

2020-04-03	Add an other article mentioning Snuffleupagus	jvoisin

2020-04-03	Add cPanel to the list of users	jvoisin

2020-04-01	Document why SP doesn't provide a `.nop` action	jvoisin

2020-03-09	Mention Synacktiv's latest talk	jvoisin

2020-03-04	%s/nbs-system/jvoisin	jvoisin
	Since I'm the only one to maintain Snuffleupagus, let's adjust the links and contact addresses of my fork, to point to well… my fork.
2019-10-24	Update the "papers" section of the documentation	jvoisin

2019-10-22	Revamp a bit the FAQ	jvoisin

2019-08-31	Support direct syslog logging	Thibault "bui" Koechlin
	Add the possibility to log directly into the syslog, instead of using php's log system.
2019-07-05	Document a workaround for a gentoo-specific bug	jvoisin
	Thanks to infectormp for reporting the bugs, and testing the workaround.
2019-06-12	bump the changelog	kka

2019-02-23	Fix the testsuite on php8.	jvoisin
	In php8, it's non-trivial to hook strlen, since this function is usually optimized away by the compiler.
2019-01-22	Fix typos and suggest more broad term for sysadmins	tomcodes

2019-01-21	Document the point of having a black-list approach for eval	jvoisin

2019-01-19	Fix typo in how Snuffleupagus is spelled in doc/source/config.rst	tomcodes

2019-01-12	We're not in alpha anymore \o/	jvoisin

2019-01-09	Add a note about PHP7.3+ SameSite support	jvoisin

2019-01-09	Rename a documentation file	jvoisin

2018-12-31	Fix spelling issue in features doc	Philip Keighley
	Changed 'passer' to 'passed'
2018-12-26	Document that it's not possible to hook builtins via regexp	jvoisin
	Also bump a bit the coverage
2018-12-26	Fix a typo	jvoisin

2018-12-23	Mention that SP is packaged in Fedora and FreeBSD	jvoisin

2018-12-23	Fix a typo in the changelog	jvoisin
	Spotted by @PeeHaa
2018-12-21	bump the changelogv0.4.1	kka

2018-12-15	Document the previous commit	jvoisin

2018-12-01	Improve the documentation wrt. functions hooked by sloppy comparisons	jvoisin
	This should close #264
2018-11-29	Document our curl-tls-verification magic	jvoisin

2018-11-23	Document a bit more the threat model	jvoisin

2018-11-18	Improve the cookie encryption documentation	jvoisin
	This should close #261
2018-11-18	Add alertot to the list of users	jvoisin
	Source: https://twitter.com/alertot/status/1063366265593622528
2018-10-23	Improve a bit the documentation, again	jvoisin

2018-10-23	Clarify a bit the documentation	jvoisin
	A user was a bit afraid that Snuffleupagus might damage their website permanently, so we rephrase the documentation to convey that this is not the case.
2018-10-07	Document the `.pos` filter	jvoisin

2018-10-06	Improve a bit the documentation	jvoisin
	Thanks to @joe for bringing up this issue ♥
2018-09-13	Add the 44con's slides in the documentation	jvoisin

2018-09-01	Add mentions to the propaganda page	jvoisin

2018-08-31	Bump the changelogv0.4.0	jvoisin

2018-08-30	Change how we're handling invalid configurations	xXx-caillou-xXx
	Since our configuration format is a bit more complex than php's one, we have a `sp.allow_broken_configuration` parameter (`false` by default), that you can set to `true` if you want PHP to carry on if your Snuffleupagus' configuration contains syntax errors. You'll still get a big scary message in your logs of course. We do not recommend to use it of course, but sometimes it might be useful to be able to "debug in production" without breaking your website.