Laravel-Security

Laravel Security Laravel Security a été créé et est maintenu par Graham Campbell, et est un wrapper voku/anti-xss pour Laravel, utilisant graham-campbell/security-core. N'hésitez pas à consulter le journal des modifications, les versions, la politique de sécurité, la licence, le code de conduite ...

GHSA-Q2QJ-628G-VHFW Insecure header validation in slim/psr7

Impact An attacker could sneak in a newline \n into both the header names and values. While the specification states that \r\n\r\n is used to terminate the header list, many servers in the wild will also accept \n\n. An attacker that is able to control the header names that are passed to Slilm-Ps...

HTTP Proxy header vulnerability

Bug Fixes Removed support for using HTTPPROXY environment variable for non-CLI apps per CVE-2016-5385 httpoxy. Graham Campbell 143 145 Convert BUGSNAGNOTIFYRELEASESTAGES to a comma-delimited array Jason Graham Campbell 142 144...