From 5da3a92492bf169e62367d954cfa7432bee51fed Mon Sep 17 00:00:00 2001 From: jvoisin Date: Mon, 9 Jul 2018 07:37:58 +0000 Subject: Trying to fix sloppy comparison (#186) * Trying to fix sloppy comparison https://github.com/nbs-system/snuffleupagus/issues/10 by modifying php's opcode --- doc/source/config.rst | 13 +++++++++++++ 1 file changed, 13 insertions(+) (limited to 'doc') diff --git a/doc/source/config.rst b/doc/source/config.rst index b5bcad4..0186b4a 100644 --- a/doc/source/config.rst +++ b/doc/source/config.rst @@ -106,6 +106,19 @@ It can either be ``enabled`` or ``disabled``. .. _config_global: +Prevent sloppy comparison +^^^^^^^^^^^^^^^^ + +sloppy_comparison, disabled by default, will prevent php `type +juggling `_ (``==``) , preventing any bypass of a comparison. + +It can either be ``enabled`` or ``disabled``. + +:: + + sp.sloppy_comparison.enable(); + sp.sloppy_comparison.disable(); + unserialize_hmac ^^^^^^^^^^^^^^^^ -- cgit v1.3