| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2023-09-20 | Bump the changelogv0.10.0 | jvoisin | |
| 2023-01-31 | Add sp.log_max_len | jvoisin | |
| 2023-01-03 | Bump the changelogv0.9.0 | jvoisin | |
| 2022-12-08 | Add unserialize_noclass | jvoisin | |
| 2022-08-27 | Bump the changelogv0.8.3 | jvoisin | |
| 2022-07-12 | Refactoring of the previous commit | jvoisin | |
| 2022-07-12 | Minor refactorisation | jvoisin | |
| 2022-06-27 | Dump the eval'ed code | jvoisin | |
| 2022-05-20 | Bump the changelogv0.8.2 | jvoisin | |
| 2022-05-16 | Bump the changelogv0.8.1 | jvoisin | |
| 2022-05-15 | Bump the changelogv0.8.0 | jvoisin | |
| 2022-03-20 | Merge remote-tracking branch 'sektioneins/master' | jvoisin | |
| 2021-11-19 | added old php version check | Ben Fuhrmannek | |
| 2021-11-11 | inverted logic. set xxe_protection.enable() instead of disable_xxe.disable() | Ben Fuhrmannek | |
| 2021-09-23 | config is stack allocated now + some code improvements (see details) | Ben Fuhrmannek | |
| * for easier memory manegement, the entire sp_config struct was merged into snuffleupagus_globals and allocated on stack where possible * SNUFFLEUPAGUS_G() can be written as SPG(), which is faster to type and easier to read * execution_depth is re-initialized to 0 for each request * function calls with inline string and length parameters consistently use ZEND_STRL instead of sizeof()-1 * execution is actually hooked if recursion protection is enabled * some line breaks were removed to make the code more readable | |||
| 2021-09-16 | ported server.strip and server.encode features from suhosin | Ben Fuhrmannek | |
| 2021-09-15 | implemented execution depth limit | Ben Fuhrmannek | |
| 2021-09-15 | changed version and version output in phpinfo | Ben Fuhrmannek | |
| 2021-08-16 | fincy new scanner/parser for config rules + fixed a few bugs along the way + ↵ | Ben Fuhrmannek | |
| fixed related unittests | |||
| 2021-08-07 | PHP7 compatibility | Ben Fuhrmannek | |
| 2021-08-06 | implemented ini settings protection | Ben Fuhrmannek | |
| 2021-08-02 | Bump the changelogv0.7.1 | jvoisin | |
| 2021-04-28 | A pass of clang-format | jvoisin | |
| 2021-01-03 | Don't check for bundled pcre in php8 | jvoisin | |
| Patch coming from https://gitlab.alpinelinux.org/alpine/aports/-/merge_requests/16372/diffs#diff-content-c2549fd272f686fb013e5c74164615ca073560bb | |||
| 2021-01-02 | Bump the changelogv0.7.0 | jvoisin | |
| 2020-12-24 | Add PHP8 support | Julien Voisin | |
| 2020-12-13 | Remove a duplicate include | jvoisin | |
| 2020-11-12 | Snuffleupagus now uses pcre2 by default | jvoisin | |
| 2020-11-06 | Bump the changelogv0.6.0 | jvoisin | |
| 2020-08-12 | Allow empty configuration (#342) | jvoisin | |
| This commit allows php to run (with a warning) if there is no specified snuffleupagus configuration, instead of refusing to start. | |||
| 2020-08-07 | Move an include | jvoisin | |
| 2020-06-20 | Bump the changelogv0.5.1 | jvoisin | |
| 2020-03-04 | %s/nbs-system/jvoisin | jvoisin | |
| Since I'm the only one to maintain Snuffleupagus, let's adjust the links and contact addresses of my fork, to point to well… my fork. | |||
| 2019-10-24 | Improve a bit the compatibility with php8 | jvoisin | |
| - Apparently, TSRMLS_C and TSRMLS_FETCH aren't defined anymore, so we have to manually define them to nothing - PHP8 constified a bit some strings, which is great, so we should do the same to avoid warnings | |||
| 2019-08-31 | Support direct syslog logging | Thibault "bui" Koechlin | |
| Add the possibility to log directly into the syslog, instead of using php's log system. | |||
| 2019-06-20 | Fix snufflepagus_globals linking issues and one mac compatibility issue | bef | |
| 2019-06-12 | update snuffleupagus.h with new version | kka | |
| 2019-02-23 | Try to unify the includes | jvoisin | |
| 2019-01-12 | Make compilation stop gracefully in the absence of PCRE | jvoisin | |
| 2018-12-26 | Add a PHP5 guard | jvoisin | |
| 2018-12-21 | bump the changelogv0.4.1 | kka | |
| 2018-10-06 | Remove sp_terminate and bump a bit the coverage | jvoisin | |
| 2018-09-03 | Fix #241 segfault on 32-bit related to bad protype (#242) | Remi Collet | |
| This should close #241 | |||
| 2018-08-31 | Bump the changelogv0.4.0 | jvoisin | |
| 2018-08-30 | Change how we're handling invalid configurations | xXx-caillou-xXx | |
| Since our configuration format is a bit more complex than php's one, we have a `sp.allow_broken_configuration` parameter (`false` by default), that you can set to `true` if you want PHP to carry on if your Snuffleupagus' configuration contains syntax errors. You'll still get a big scary message in your logs of course. We do **not** recommend to use it of course, but sometimes it might be useful to be able to "debug in production" without breaking your website. | |||
| 2018-08-29 | Change how we're validating certificates | xXx-caillou-xXx | |
| 2018-08-29 | Verify certs (#223) | jvoisin | |
| Ensure that certificates are verified in curl should close #47 | |||
| 2018-08-27 | Add whitelist support for php's wrappers | xXx-caillou-xXx | |
| 2018-08-20 | Bump the changlogv0.3.1 | hamza (hes) ES SAHELY | |
| 2018-07-19 | Bump the changelog | kka | |
 |
index : snuffleupagus | |
| Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest! |
| summaryrefslogtreecommitdiff |