Documentation

Rector

Table of Contents

Classes

SecureGetImageSizeRector
Security: Replace getimagesize() with \Maho\Io::getImageSize() This prevents phar:// deserialization attacks
SecureUnserializeRector
Security: Add allowed_classes => false to all unserialize() calls This prevents object injection attacks via cache poisoning or other vectors
VarienToMahoClassMap
Mapping of legacy Varien_* classes to new Maho\* namespace
On this page

Search results