Disallow escapeshellcmd, prefer escapeshellarg
This commit is contained in:
@@ -126,7 +126,7 @@
|
||||
<element key="sizeof" value="count"/>
|
||||
</property>
|
||||
-->
|
||||
<property name="forbiddenFunctions" type="array" value="delete=>unset,print=>echo,create_function=>null,system=>null,sizeof=>count" />
|
||||
<property name="forbiddenFunctions" type="array" value="delete=>unset,print=>echo,create_function=>null,system=>null,sizeof=>count,escapeshellcmd=>escapeshellarg" />
|
||||
</properties>
|
||||
</rule>
|
||||
|
||||
|
||||
Reference in New Issue
Block a user