oci-images/nextcloud/99-security-hardening.ini
chris 9b3a19d2a8
All checks were successful
Build Nextcloud / Build Nextcloud 34 Image (push) Successful in 6m58s
php suggest to protect against unlikely RCE
2026-10-23 13:38:01 +02:00

16 lines
718 B
INI

; Whether to use strict session mode.
; Strict session mode does not accept an uninitialized session ID, and
; regenerates the session ID if the browser sends an uninitialized session ID.
; Strict mode protects applications from session fixation via a session adoption
; vulnerability. It is disabled by default for maximum compatibility, but
; enabling it is encouraged.
; https://wiki.php.net/rfc/strict_sessions
session.use_strict_mode = 1\
; Enable upload progress tracking in $_SESSION
; Default Value: On
; Development Value: On
; Production Value: On
; https://php.net/session.upload-progress.enabled
; Warum, siehe hier: https://www.php.net/archive/2026.php#2026-10-23-1
session.upload_progress.enabled = Off