Re: Preliminary PHP taint support available
| From: | Christian Schneider | Date: | Thu, 08 Nov 2007 13:14:14 +0000 |
| Subject: | Re: Preliminary PHP taint support available | ||
| References: | 1 2 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-33062@lists.php.net to get a copy of this message | ||
First of all: I've been playing around with it and it looks great!
Some comments:
1) I added taint support to func_get_args() and func_get_arg(), a patch
is attached.
2) Maybe the functions should be renamed to taint_xxx (e.g. taint_set,
taint_clear, taint_check or the like) to reside in their own 'namespace'.
I hope your work will be integrated in the main PHP tree as it provides
a useful tool to developers IMHO.
For now I plan to use your patch on our development machines so I might
have more feedback in the near future.
Cheers,
- Chris