From 6a3f2ecbc1ae60e533f75563b39a6b035b3cc93f Mon Sep 17 00:00:00 2001 From: tomcodes Date: Tue, 22 Jan 2019 23:30:00 +0100 Subject: Fix typos and suggest more broad term for sysadmins --- doc/source/features.rst | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) (limited to 'doc/source') diff --git a/doc/source/features.rst b/doc/source/features.rst index e3ae876..407b9c7 100644 --- a/doc/source/features.rst +++ b/doc/source/features.rst @@ -309,7 +309,7 @@ be raised if the types aren't matching. are optional, but you don't have to use them in your code to benefit from them, since every internal function from php has them. -This option provide a switch to globally activate this strict mode, +This option provides a switch to globally activate this strict mode, helping to uncover vulnerabilities like the classical `strcmp bypass `_ and various other types mismatch. @@ -384,10 +384,10 @@ besides templating and building mathematical expressions based on user input, it's broadly (mis)used all around the web. Snuffleupagus provides a white and blacklist mechanism, to explicitly allow -and forbid specific functions call from being issued inside ``eval``. +and forbid specific function calls from being issued inside ``eval``. While it's heavily recommended to only use the whitelist feature, the blacklist -one exists because some adminsys might want to use it to catch automated +one exists because some sysadmins might want to use it to catch automated script-kiddies attacks, while being confident that doing so won't break a single website. -- cgit v1.3