You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -7,7 +7,7 @@
7
7
## Abstract & History
8
8
9
9
Based on Sam Thomas' findings concerning
10
-
[insecure deserialization in combination with obfuscation strategies](https://blog.secarma.co.uk/labs/near-phar-dangerous-unserialization-wherever-you-are)
10
+
[insecure deserialization in combination with obfuscation strategies](https://www.secarma.com/labs/near-phar-dangerous-unserialization-wherever-you-are.html)
11
11
allowing to hide Phar files inside valid image resources, the TYPO3 project
12
12
decided back then to introduce a `PharStreamWrapper` to intercept invocations
13
13
of the `phar://` stream in PHP and only allow usage for defined locations in
0 commit comments