snuffleupagus VS tachiyomi

I wonder if Snuffleupagus can block this exploit.

https://snuffleupagus.readthedocs.io/

Having had to deal with a PHP exploit and still dealing with it I was looking around and came across jvoisin/snuffleupagus: Security module for php7 and php8 with is a successor to suhosin.

Other than that we rely on quite a lot of things these days, notably ModSecurity and the OWASP Core Rule Set alongside some other heavy restricting of our apps. (the idea being that the app is safe on its own, but those act as extra layers of defense in case we fuck up something really badly in the app one day)

When it comes to your application: I don't know how tech-savvy you are, and I'm not sure if you're worried about someone breaking into your webapp, but you could look into setting up security extentions like snuffleupagus (PHP) and SpiderLab's ModSecurity WAF for Apache and nginx for which OWASP has a great, free ruleset

snuffleupagus is pretty cool, I highly recommend looking at the default rules if you're wondering what it's capable of: https://github.com/jvoisin/snuffleupagus/blob/master/config/default.rules There are some things in there that you might not know about php yet!

No, it's a module that hooks into php functions and offers some general harding (like refusing to execute files that could be written to by www-data) and allows more fine-grained control over disable_function, like setting filters/rules for some arguments. The default config shows how to mitigate certain bypasses for regular php.ini based hardening: https://github.com/jvoisin/snuffleupagus/blob/master/config/default.rules

Tachiyomi[0] is a FOSS comic reader app for Android which has support for extensions to source comics from different sites which are unrelated to Tachiyomi

Tachiyomi already removed their extension list which contained both unofficial and official sources for comics[1]

[0] https://github.com/tachiyomiorg/tachiyomi

if you are on android: https://github.com/tachiyomiorg/tachiyomi then google for which extensions to look for marvel wise, they have most/all as i read them before through there.

I think you are right about it being a cache issue. I wonder if it is related to this: https://github.com/tachiyomiorg/tachiyomi/issues/8827

I don't use it, but if you're on android look into downloading Tachiyomi. Lots of people recommend it on this subreddit and it looks pretty customizable. It can pull from the different manga websites out there I believe.

Install from official site: https://tachiyomi.org