Skip to content

Fondouk v1.2.3 — security hardening

Choose a tag to compare

View all tags
@rmed19 rmed19 released this 15 Jul 15:11
v1.2.3
453ebb4

Security hardening

Migrates raw superglobal reads ($_SERVER[...]) and file_get_contents('php://input') to the Symfony HttpFoundation Request object (headers->get(), getMethod(), bounded getContent()) in RequestGuard, catalog, ucp and AccessLogger.

Behaviour is unchanged — this clears the PrestaShop Addons security scanner's SQL_Injection false positives on tainted-input sources.

Adds build/check-security.sh (SQL injection / XSS / RCE / superglobals guard) wired into packaging, documented in docs/SECURITY-RULES.md.

Compatibility: PrestaShop 8.0 → 9.1 (verified); declared 8.0.0–9.99.99.

Assets 3
Loading