Artificial truth

archives | latest | homepage | atom/rss/twitter

The more you see, the less you believe.

First release of Snuffleupagus
Thu 21 December 2017 — download

snuffleupagus logo

Today, we (blotus, caillou (my intern) and me) released the very first version of Snuffleupagus, the 0.1.0, codename Mighty Mammoth. As hinted in the previous blogposts, Snuffleupagus is a security module for PHP7, and everything you need to know about it is written in its exhaustive documentation.

For the release, we fixed a lot of bugs (most of them were, unsurprisingly, related to cookie-encryption), made sure that everything was working on a typical Wordpress and Magento 2 stacks, and caillou implemented an amazing parser for the configuration so you can match with a regexp on the content of a variable like $a->b[$c[2]]['batman'].

We're slowly putting it into production on our side, and other people are already happy users. Since we're providing packages for various distributions, you could do the same: Offer yourself, for Christmas, an hardened PHP7 stack, allowing you to sleep better at night, without living in the fear of the next big vulnerability in whatever web stuff you're using.

For the next release, the 0.2.0, we already have a lot of cools ideas, but do feel free to add your own. If you feel like contributing, we have some easy issues with guidelines on how to contribute, and if you don't know how to write proper C, we'll be happy to accept new rules files for you favourite CMS!