Snuffleupagus - Killing Bugclasses in PHP 7, Virtual-Patching the Rest

Explore a conference talk on Snuffleupagus, an open-source PHP security module designed to address vulnerabilities in PHP 7 applications. Learn about its features for passively eliminating PHP-specific bug classes and implementing virtual-patching at the PHP level. Discover how this tool allows for precise, false-positive-free, and low-overhead vulnerability patching without modifying application code. Gain insights into PHP security, including topics such as disabling functions, filtering content, handling PHP eval, and addressing XML external entities. Understand the performance impact and benefits of using Snuffleupagus in secure web hosting environments.