system: restrict PHP further

opnsense / core

OPNsense GUI, API and systems backend

https://opnsense.org/

BSD 2-Clause "Simplified" License

3.28k stars 727 forks source link

Closed fichtner closed 3 months ago

fichtner commented 3 months ago

Dipping the toe in the php.ini best practices...

max execution time is recommended as 300 at most via coverity
We don't handle multiple $_FILES except maybe in external backup providers who could create multiple type=file fields.
having fopen() not read URLs is probably sane enough

swhite2 commented 3 months ago

can't see any weirdness that would be restricted by this, LGTM