Package Information |
Summary |
XSS code sniffer |
Maintainers |
Xinchen Hui <
laruence at php dot net >
(lead)
[details]
|
License |
PHP |
Description |
An extension used for detecting XSS codes(tainted string),
And also can be used to spot sql injection vulnerabilities, shell inject, etc. |
Release notes
Version 0.5.0
(beta)
|
- Support more functions(strstr, substr, str_replace etc) - Fixed Bug that tainted info lost if string is parsed by htmlspecialchars - Trigger warning when doing dim assign concat |
|