From 9b3a19d2a826a286fb80ebe42aba4e2f5ccb2858 Mon Sep 17 00:00:00 2001 From: chris Date: Fri, 23 Oct 2026 13:38:01 +0200 Subject: [PATCH] php suggest to protect against unlikely RCE --- nextcloud/99-security-hardening.ini | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/nextcloud/99-security-hardening.ini b/nextcloud/99-security-hardening.ini index 90a4b57..80c7593 100644 --- a/nextcloud/99-security-hardening.ini +++ b/nextcloud/99-security-hardening.ini @@ -5,5 +5,12 @@ ; vulnerability. It is disabled by default for maximum compatibility, but ; enabling it is encouraged. ; https://wiki.php.net/rfc/strict_sessions -session.use_strict_mode = 1 +session.use_strict_mode = 1\ +; Enable upload progress tracking in $_SESSION +; Default Value: On +; Development Value: On +; Production Value: On +; https://php.net/session.upload-progress.enabled +; Warum, siehe hier: https://www.php.net/archive/2026.php#2026-10-23-1 +session.upload_progress.enabled = Off