Package Information |
Summary |
XSS code sniffer |
Maintainers |
Xinchen Hui <
laruence at php dot net >
(lead)
[details]
|
License |
PHP |
Description |
An extension used for detecting XSS codes(tainted string),
And also can be used to spot sql injection vulnerabilities, shell inject, etc. |
Release notes
Version 0.3.0
(beta)
|
- Taint result of sprintf/vsprintf instead of trigger warnings. - Taint result of explode/implode if the input is tained. - Taint result of strval if the input is tainted |
|