Fix yet another php surprised-rename of functions parameters

jvoisin · Mar 24, 2024 · 6fe3815 · 6fe3815
1 parent 435977a
commit 6fe3815
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/config/default_php8.rules b/config/default_php8.rules
@@ -39,7 +39,9 @@ sp.disable_function.function("chmod").param("permissions").value("438").drop();
 sp.disable_function.function("chmod").param("permissions").value("511").drop();
 
 # Prevent various `mail`-related vulnerabilities
-sp.disable_function.function("mail").param("additional_parameters").value_r("\\-").drop();
+# Uncommend the second rule if you're using php8.3+
+#sp.disable_function.function("mail").param("additional_parameters").value_r("\\-").drop();
+#sp.disable_function.function("mail").param("additional_params").value_r("\\-").drop();
 
 # Since it's now burned, me might as well mitigate it publicly
 sp.disable_function.function("putenv").param("assignment").value_r("LD_").drop()