protect unserialize()

2 years ago · 2a4f6836cf
parent e5ab9821f9
commit 2a4f6836cf
1 changed files with 2 additions and 0 deletions
--- a/webmails/snuffleupagus.rules
+++ b/webmails/snuffleupagus.rules
@ -124,3 +124,5 @@ sp.auto_cookie_secure.enable();
 sp.cookie.name("roundcube_sessauth").samesite("strict");
 sp.cookie.name("roundcube_sessid").samesite("strict");
 sp.ini_protection.policy_silent_fail();
+
+sp.disable_function.function("unserialize").param("data").value_r("[cCoO]:\d+:\"").drop();