enhance-dev / enhance-dev/enhance-wordpress-plugin

Setup with ffi Preload for better security

Open
#1 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
19
Forks
0
PR merge metrics
No merged PRs in 30d

Description

Because PHP does not have built in WASM support we use the Extism binary to execute the WASM. This happens through the Fourign Function Interface (FFI) allowing PHP to use external C libraries. The easiest way to allow this is to set `ffi.enable=true` in the php.ini file. This is a potential security vulnerability if another plugin or theme in the Wordpress installation is compromised. It would be better to set `ffi.enable=preload` and explicitly allow only the extism binary to access the FFI it needs.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.