new: [securityAudit] Check if xdebug is enabled

pull/7975/head
Jakub Onderka 2021-11-19 21:57:25 +01:00
parent ac59e1ee54
commit eb8955b220
1 changed files with 8 additions and 0 deletions

View File

@ -226,6 +226,14 @@ class SecurityAudit
'https://www.php.net/supported-versions.php'
];
}
if (extension_loaded('xdebug')) {
$output['PHP'][] = [
'error',
__('The xdebug extension can reveal code and data to an attacker.'),
];
}
if (ini_get('session.use_strict_mode') != 1) {
$output['PHP'][] = [
'warning',