Commit Graph

14 Commits

Author SHA1 Message Date
Zach Borboa ccd476b448 Make https:// and http:// the allowed request protocols by default 2023-02-25 10:23:18 -08:00
Zach Borboa 81ce41b0d0 Fix #724: Remove filter flag constants deprecated as of PHP 7.3
Error messages:
    Fatal error: Uncaught Error: Undefined constant "FILTER_FLAG_SCHEME_REQUIRED" in [...]
    Fatal error: Uncaught Error: Undefined constant "FILTER_FLAG_HOST_REQUIRED" in [...]
2022-09-23 19:56:44 -07:00
Zach Borboa 161f9aea63 Use short array syntax 2021-03-18 01:15:52 -04:00
Zach Borboa d25b2bff6f Add note regarding PHP execution of library files and WordPress plugins (#562) 2018-12-12 21:18:44 -08:00
Zach Borboa 7ba91bd554 Add XML external entity injection section to security doc 2018-06-20 03:03:25 -07:00
Zach Borboa 402b013c14 Improve url filtering:
- Require urls to have a scheme and host
- Allow select ip addresses
2018-05-31 23:51:13 -07:00
Zach Borboa ffa9651ffc Clean up 2016-12-30 10:49:01 -08:00
Zach Borboa e2efcfbb05 Add additional example where requests with redirection enabled may be unsafe 2016-10-18 00:51:37 -07:00
Zach Borboa f53cd9cbeb Fix typo 2016-10-14 18:54:41 -07:00
Zach Borboa 1d7af4465f Clean up 2016-10-13 00:10:05 -07:00
Zach Borboa efe1bcc944 Add section headers 2016-10-13 00:08:25 -07:00
Zach Borboa 5cd1df88f5 Clean up 2016-10-12 23:48:02 -07:00
Zach Borboa 7b7b84eb68 Add additional security considerations 2016-10-12 23:43:24 -07:00
Zach Borboa b127e6fb07 Add security section 2016-10-12 09:17:44 -07:00