Skip to content

Audit fixes (2026-09) - #3

Merged
luthermonson merged 1 commit into
mainfrom
fix/audit-2026-09
Sep 11, 2026
Merged

luthermonson merged 1 commit into
mainfrom
fix/audit-2026-09

Conversation

@luthermonson

Copy link
Copy Markdown
Contributor

Audited fixes for psr15-worker (see per-repo details). Config-key migration to [php.worker] (ePHPm #462, the old flat keys are hard startup errors), multipart name[] upload fix where applicable, request-isolation/security fixes for wordpress-worker, and CI (phpunit on PHP 8.2/8.3/8.4). Tests added for every behavioral/security change. wordpress-worker's podman e2e must be re-run manually.

…] config; add CI

- assignFile(): build PHP's pivoted $_FILES shape for bracketed field names
  (name="photos[]") instead of collapsing last-wins under the literal key
  "photos[]"; a plain name keeps the scalar single-file shape. Add
  splitFieldName()/assignByPath() helpers.
- add multi-file upload test (photos[] x2 + scalar avatar -> UploadedFile list)
- README/bin/example: [php] worker_script -> [php.worker] script; document the
  removed flat worker_* keys and [php] concurrency pool sizing
- add GitHub Actions CI (composer install + phpunit on PHP 8.2/8.3/8.4)
@luthermonson
luthermonson merged commit 59b6175 into main Sep 11, 2026
3 checks passed
@luthermonson
luthermonson deleted the fix/audit-2026-09 branch September 11, 2026 06:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant