search

sektioneins / suhosin

SUHOSIN [수호신] for PHP 5.x - The PHP security extension.
https://www.suhosin.org
Other
469 stars 71 forks source link

filter HTTP_PROXY #108

Open bef opened 8 years ago

NewEraCracker commented 8 years ago

Just for the record, this is much easier to be mitigated at Webserver level: https://httpoxy.org/

bef commented 8 years ago

Correct. In fact most of Suhosin's filtering capabilities can be easily replaced by other filters either using the web server (mod_rewrite, mod_env, ...) or by configuring a WAF (e.g. mod_security). It just takes a lot of time and effort to configure all of them, so why not add some important filters to Suhosin.