flyspray: don't allow fopen to open urls

d7f69d80 · Jelle van der Waa · 731293d3 · d7f69d80
Verified Commit d7f69d80 authored Oct 02, 2021 by Jelle van der Waa 🚧
--- a/roles/flyspray/templates/php-fpm.conf.j2
+++ b/roles/flyspray/templates/php-fpm.conf.j2
@@ -22,3 +22,4 @@ php_admin_value[opcache.max_accelerated_files] = 200
 php_admin_value[opcache.revalidate_freq] = 60
 php_admin_value[opcache.fast_shutdown] = 1
 php_admin_value[disable_functions] = virtual, dl, suexec, popen, proc_nice, proc_open, proc_terminate, exec, passthru, system, show_source, shell_exec, escapeshellcmd, escapeshellarg
+php_admin_flag[allow_url_fopen] = off