From b873b89b62e6d9660fa9d7324b5c5c80a9b4c105 Mon Sep 17 00:00:00 2001 From: Punyapal Shah Date: Tue, 11 Jun 2024 21:20:32 +0530 Subject: [PATCH] Restrict additional dangerous functions in Security.php --- src/ArchPresets/Security.php | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/ArchPresets/Security.php b/src/ArchPresets/Security.php index 2beafa83..c7142748 100644 --- a/src/ArchPresets/Security.php +++ b/src/ArchPresets/Security.php @@ -32,6 +32,10 @@ final class Security extends AbstractPreset 'create_function', 'unserialize', 'extract', + 'parse_str', + 'mb_parse_str', + 'dl', + 'assert', ])->not->toBeUsed(); } }