search

laruence / taint

Taint is a PHP extension, used for detecting XSS codes
Other
611 stars 128 forks source link

doesnt work with xdebug enabled #47

Closed staabm closed 6 years ago

staabm commented 7 years ago

I am running php7.0.14 on ubuntu 14 and taint doesnt output any warnings when xdebug is loaded at the same time.

disabling the xdebug extension results into warnings beeing printed.

I am testing with the very simple example from the readme.

staabm commented 7 years ago

@derickr any insights whether this behaviour might depend on a certain xdebug setting and could be worked arround somehow?

laruence commented 7 years ago

yeah, they are conflict.... and actually, there should be a warning since taint already declare conflicts with xdebug

laruence commented 7 years ago

the reason is both xdebug and taint will override some user opcode handler

staabm commented 7 years ago

I didnt saw any error/warning.. did some guesswork which extension might be a problem and found xdebug "to be the cause"

derickr commented 7 years ago

It's not a setting. PHP doesn't allow two extensions to override the same user opcode handlers. Perhaps you can change the order of loading extensions, but that will likely break some Xdebug functionality.