not strictly speaking a pecl port, but close enough to use the same
ports module etc.

ok to import?

---
Snuffleupagus is a PHP 7+ and 8+ module designed to drastically raise
the cost of attacks against websites, by killing entire bug classes. It
also provides a powerful virtual-patching system, allowing administrator
to fix specific vulnerabilities and audit suspicious behaviours without
having to touch the PHP code.

Killing several classes of vulnerabilities
- Unserialize-based code execution
- mail-based code execution
- Cookie-stealing XSS
- File-upload based code execution
- Weak PRNG
- XXE

Several hardening features
- Automatic secure and samesite flag for cookies
- Bundled set of rules to detect post-compromissions behaviours
- Global strict mode and type-juggling prevention
- Whitelisting of stream wrappers
- Preventing writeable files execution
- Whitelist/blacklist for eval
- Enforcing TLS certificate validation when using curl
- Request dumping capability
---

Attachment: pecl-snuffleupagus.tgz
Description: application/tar-gz

Reply via email to