PHP Extension Repository is a modern mirror of PECL website with Windows pre-build.

taint

pecl install taint

XSS code sniffer

An extension used for detecting XSS codes(tainted string),
And also can be used to spot sql injection vulnerabilities, shell inject, etc.

Maintainer

  • Xinchen Hui (lead )

Details

Stars: 602
Issue openned: 21
Downloads: 137643
0.4.0
12 years ago
Request a build
Request to the website owner's team the built this extension with this parameters. The result is not guaranteed and can be impossible for many reasons. The extension source code is frequently not upto date with the most recent PHP version.
If you have another code source for this extension, provide it in comment.
Please (or register) to request a build.
Version 0.4.0 change log

- Support trim/rtrim/ltrim
- Dosen't depend on exposing of zif_* symbols any more
- Fixed a potential crash(PHP 5.2)
- Fixed bug that concat_assign lost tainted info in php 5.4(if the var_ptr is tainted while value is not)
- Fix memory leak in assign_concat
- Fix tests faild of sprintf/trim etc args signature
- Fixed compiler warnings