index
:
snuffleupagus
85beta2
log2file
master
Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest!
summary
refs
log
tree
commit
diff
log msg
author
committer
range
path:
root
/
src
/
tests
(
follow
)
Age
Commit message (
Expand
)
Author
2018-08-02
fix #203 (#204)
crKontrol
2018-07-19
Fix the issue with rand hardening
xXx-caillou-xXx
2018-07-13
Skip VLD for php7.3, as VLD is not compatible yet.
xXx-caillou-xXx
2018-07-13
Reduce call to get_complete_function_path
xXx-caillou-xXx
2018-07-13
Fix hooking on `print`
xXx-caillou-xXx
2018-07-13
Allow rules matching on echo and print
xXx-caillou-xXx
2018-07-10
Fix #183 (#185)
Remi Collet
2018-07-09
Trying to fix sloppy comparison (#186)
jvoisin
2018-06-28
Better handling of filters for builtins
kkadosh
2018-05-29
Support session encryption
kkadosh
2018-05-16
Don't run some tests on `-dev` php versions
jvoisin
2018-05-16
Improve the testsuite's robustness against php7.2
jvoisin
2018-05-03
Uniformise some logs
simon MAGNIN-FEYSOT
2018-03-19
The filename filter is now matching on callsite instead of implemsite (#167)
kkadosh
2018-03-19
Add a failing test for callback function as parameter
kkadosh
2018-03-19
Increase random number max for test
kka
2018-03-15
Change a test to expected failed
kkadosh
2018-03-14
Bump a bit the coverage
jvoisin
2018-03-09
Add an unit test for an edge-case
jvoisin
2018-03-06
Bump a bit the coverage
jvoisin
2018-03-06
Fix a variadic-functions-related crash
jvoisin
2018-03-02
Add .dump() for eval whitelist/blacklist + simulation mode for whitelist
kkadosh
2018-03-02
Implement dump() for execution of writable PHP files
kkadosh
2018-03-02
Add some rules for Typo3, courtesy of @kjojo
jvoisin
2018-02-27
Implements .dump() for unserialize and fix some related tests
kkadosh
2018-02-22
php-nightly is now allowed to fail
jvoisin
2018-02-22
Refactor a bit our rules
jvoisin
2018-02-12
Provide a script for upload validation
jvoisin
2018-02-09
Add a broken test :'(
jvoisin
2018-02-07
Add an example rule from the rips calendar for abantecart's XSS
kjojo
2018-02-06
Increase a bit the coverage
jvoisin
2018-02-06
Add a test to make sure that arrays are correctly handled
jvoisin
2018-02-06
Add a test to check regexps
jvoisin
2018-02-05
Massive simplification of functions hooking
jvoisin
2018-02-05
Compatibility layer for pcre2
jvoisin
2018-01-26
Fix a segfault in `get_local_var` (#138)
Thibault "bui" Koechlin
2018-01-19
The testsuite is now successfully running under the root user
jvoisin
2018-01-18
Remove src from patch
Remi Collet
2018-01-18
Add globbing support for configuration file path (closes #125)
Sebastien Blot
2018-01-18
Improve the way we're dealing with filtering on parameter positions
jvoisin
2018-01-17
Bump a bit the coverage
jvoisin
2018-01-17
remove src from path (#126)
Remi Collet
2018-01-17
Bump a bit our coverage
jvoisin
2018-01-17
Our configuration files are ending in .rules, not .ini
jvoisin
2018-01-12
Add an ugly hack to our parser to make the writing of configuration rules mor...
jvoisin
2018-01-10
Rework the priority of bl/wl in eval
jvoisin
2018-01-10
Eval whitelist
jvoisin
2018-01-08
Add a test to see what happens when no configuration file is given
jvoisin
2018-01-06
Ignore a test when running the testsuite as root
jvoisin
2018-01-05
Fix a bypass in our eval blacklist
jvoisin
[next]