php-src/sapi/cgi
Niels Dossche c1c14c8a0f
Fix GHSA-94p6-54jq-9mwp
Apache only generates REDIRECT_STATUS, so explicitly check for that
if the server name is Apache, don't allow other variable names.
Furthermore, redirect.so and Netscape no longer exist, so
remove those entries as we can't check their server name anymore.

We now also check for the configuration override *first* such that it
always take precedence. This would allow for a mitigation path if
something like this happens in the future.
2024-09-23 11:24:26 +01:00
..
tests Fix GHSA-3qgc-jrrr-25jv 2024-06-05 00:29:19 -05:00
cgi_main.c Fix GHSA-94p6-54jq-9mwp 2024-09-23 11:24:26 +01:00
cgi_main.stub.php Enable class entry generation for sapi extensions 2021-02-14 12:03:48 +01:00
cgi_main_arginfo.h Improve class entry generation 2021-02-16 13:09:56 +01:00
config.w32 Remove unused Git attributes ident 2018-07-25 00:53:25 +02:00
config9.m4 Revert "Link executable files using non PIC object files. This reduces PIC overhead and improves performance." 2019-10-10 16:28:59 +03:00
CREDITS
Makefile.frag Sync leading and final newlines in source code files 2018-10-14 12:56:38 +02:00
php-cgi.1.in Fixed Bug #65143 Missing php-cgi man page 2013-07-02 10:42:47 +02:00
php.sym