php/php-src
CCo-maintainer of the session extension and RFC author. Session security hardening, BCMath performance and bug fixes across the core.
Contributing since 2022. RFC author (session security defaults, rounding modes). The commits below are a selection.
View on GitHub →Commits 65
ref title
#22098 ext/session: add missing NEWS entries #22074 ext/session: reject null bytes in session.cookie_path, session.cookie_domain, session.cache_limiter #22072 ext/intl: Fix merge conflict markers in spoofchecker_arginfo.h #21939 refactor: remove dead condition in session.c #21938 ext/session: secure session configuration defaults (RFC) #21761 docs: add ValueError message wording conventions to CODING_STANDARDS #21704 ext/session: fix cookie_lifetime overflow #21670 ext/session: Validate SameSite cookie attribute against allowed values #21491 ext/session: add recursive session cleanup for dirname > 0 #21171 ci: add fork protection on workflow verify-bundled-files #21157 ci: remove PHP8.1 from push.yml triggers #21087 test: improve the tests for in_array #21012 chore: improve error message when passing named parameter for variadic #19663 mbstring: move mb_internal_encoding to INI section #19552 remove safe_mode leftovers #19517 ci: update codecov-action to v5 #18525 ext/hash: tests for md5 and sha1 compatibility #18518 ext/standard/md5: Improve types #18514 Add macos 15 to push GH action #18017 remove wrappers in session ext #17437 zend_hrtime: Fix build for macOS without clock_gettime_nsec_np() #16894 Remove wrapping comments in ext/skeleton #16080 Remove unused headers from link.c #15790 ext/bcmath: bcpow() performance improvement #15647 ext/standard: validate mode in array_filter() #15448 Add type indicator to array/arg unpack #15338 session_create_id - error message for large prefix #15337 session.save_handler - add two uncovered cases #15286 ValueError on null byte in session_name() #15284 fix: disable negative values for session GC probability and divisor #14958 Update fuzzer parser dict for property hooks words #14728 Check session_create_id() input for null byte #14536 random: Remove redundant assignments in php_random_rangeX() #14316 Fix undefined flags in base64 #13799 Add test for session_start with read_and_close option #13796 Remove impossible paths from session_decode and session_encode #13410 Remove HAVE_INET_PTON #13408 Add entry on return type of long2ip to NEWS #13395 Change long2ip return type #13359 remove debug.c file from bcmath ext #13235 GH-13142: add missing test cases #13192 Enable xdebug extension again in nightly #13160 add missing keywords to parser fuzzer dict from PHP 7.4 to 8.3 #13068 Improve preg_* functions warnings for NUL byte #13064 Fix value passed to show_start in run-test.php script #13010 Add case 0.0 to the test runtime_compile_time_binary_operands.phpt #13005 Improve pow function tests #12989 RFC: Deprecate date constant RFC7231 #12978 RFC: Deprecate date_sunrise and date_sunset constants #12729 Add milliseconds to the test time output #12379 Typed constants in sqlite extension #12378 Typed constants in reflection extension #12362 Typed constants in PDO extension #12361 Typed constants in date extension #12360 Typed constants in Intl extension #12358 Typed constants in SPL extension #12056 RFC: Add 4 new rounding modes to round() function #12049 Fix round() tests for different modes #11996 Tests improvement for round() modes #11896 BCmath extension code reformatting #11798 Fix GH-11761: Bcmath numbers with trailing zeros #11683 refactor: Reorder list construction in php_intpow10 #11563 Extend tests of bcmath extension #9685 Remove unnecessary usage of CONST_CS #9658 Use function HT_IS_PACKED where it's missing