From b41dcf2947bbcfca0152d06684b1caac2586a0b6 Mon Sep 17 00:00:00 2001
From: Christian Göttsche
Date: Mon, 27 May 2024 22:48:49 +0200
Subject: Wording updates

---
 config/default_php8.rules | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'config')

diff --git a/config/default_php8.rules b/config/default_php8.rules
index 096f033..a6edfbe 100644
--- a/config/default_php8.rules
+++ b/config/default_php8.rules
@@ -26,7 +26,7 @@ sp.xxe_protection.enable();
 # PHP has a lot of wrappers, most of them aren't usually useful, you should
 # only enable the ones you're using.
 # sp.wrappers_whitelist.list("file,php,phar");
-# The "php" wrapper can be further filtered
+# The "php" wrapper can be further filtered, e.g. to only allow `php://stdout`, `php://stdin` and `php://stderr`:
 # sp.wrappers_whitelist.php_list("stdout,stdin,stderr");
 
 # Prevent sloppy comparisons.
-- 
cgit v1.3