diff --git a/conf/php/snuffleupagus/default.rules b/conf/php/snuffleupagus/default.rules index 7f62296a401c855e60125d544f9006308827cc74..e3f042702e920d4009bab4a8abaaeb4ac0bb08e5 100644 --- a/conf/php/snuffleupagus/default.rules +++ b/conf/php/snuffleupagus/default.rules @@ -28,9 +28,9 @@ sp.auto_cookie_secure.enable(); # PHP has a lot of wrappers, most of them aren't usually useful, you should # only enable the ones you're using. -sp.wrappers_whitelist.list("file,php,phar"); +#sp.wrappers_whitelist.list("file,php,phar"); # The "php" wrapper can be further filtered, e.g. to only allow `php://stdout`, `php://stdin` and `php://stderr`: -sp.wrappers_whitelist.php_list("stdout,stdin,stderr"); +#sp.wrappers_whitelist.php_list("stdout,stdin,stderr"); # Prevent sloppy comparisons. # sp.sloppy_comparison.enable();