From a40c6c11be746af62e90eb871c108008d7f91c1d Mon Sep 17 00:00:00 2001
From: jvoisin
Date: Mon, 23 Jul 2018 14:57:55 +0200
Subject: Allow the inclusion of `.inc` files

---
 config/default.rules | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/config/default.rules b/config/default.rules
index b16434f..6cc67e6 100644
--- a/config/default.rules
+++ b/config/default.rules
@@ -17,10 +17,10 @@ sp.disable_function.function("mail").param("additional_parameters").value_r("\\-
 sp.disable_function.function("putenv").param("setting").value_r("LD_").drop()
 
 ##Prevent various `include`-related vulnerabilities
-sp.disable_function.function("require_once").value_r("\.php$").allow();
-sp.disable_function.function("include_once").value_r("\.php$").allow();
-sp.disable_function.function("require").value_r("\.php$").allow();
-sp.disable_function.function("include").value_r("\.php$").allow();
+sp.disable_function.function("require_once").value_r("\.(php|inc)$").allow();
+sp.disable_function.function("include_once").value_r("\.(php|inc)$").allow();
+sp.disable_function.function("require").value_r("\.(php|inc)$").allow();
+sp.disable_function.function("include").value_r("\.(php|inc)$").allow();
 sp.disable_function.function("require_once").drop()
 sp.disable_function.function("include_once").drop()
 sp.disable_function.function("require").drop()
-- 
cgit v1.3