Re: Literal / Taint checking
| From: | Matthew Brown | Date: | Thu, 15 Aug 2019 18:43:10 +0000 |
| Subject: | Re: Literal / Taint checking | ||
| References: | 1 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-106628@lists.php.net to get a copy of this message | ||
There are already some userland taint-checking solutions for PHP e.g. the
Phan taint-check plugin from MediaWiki:
https://www.mediawiki.org/wiki/Phan-taint-check-plugin
I'm working on my own userland solution, too (based on Facebook's
approach). Demo is here: https://psalm.dev/r/ebb9522fea