From c7ce5c3528e8da8762e6e7067001549e109397ba Mon Sep 17 00:00:00 2001 From: Christian Göttsche Date: Mon, 27 May 2024 21:33:00 +0200 Subject: Add option to specify the allowed "php" wrapper types In addition of the current possibility to filter wrappers by their protocol name, also add the option to filter the "php" wrapper by the requested kind. Especially the 'filter' backend can be disabled that way. --- src/sp_config.h | 2 ++ 1 file changed, 2 insertions(+) (limited to 'src/sp_config.h') diff --git a/src/sp_config.h b/src/sp_config.h index f245943..af227ba 100644 --- a/src/sp_config.h +++ b/src/sp_config.h @@ -70,6 +70,7 @@ typedef struct { typedef struct { sp_list_node *whitelist; + sp_list_node *php_stream_allowlist; bool enabled; size_t num_wrapper; // Used to verify if wrappers were added. } sp_config_wrapper; @@ -214,6 +215,7 @@ typedef struct { #define SP_TOKEN_EVAL_WHITELIST "eval_whitelist" #define SP_TOKEN_SLOPPY_COMPARISON "sloppy_comparison" #define SP_TOKEN_ALLOW_WRAPPERS "wrappers_whitelist" +#define SP_TOKEN_ALLOW_PHP_STREAMS "php_list" #define SP_TOKEN_INI_PROTECTION "ini_protection" #define SP_TOKEN_INI "ini" -- cgit v1.3