Open chaosInTheWild opened 1 year ago
I found these snippets:
Normally you would do it like this: https://psalm.dev/r/8d9ef2c87f
But Psalm doesn't seem to read taint taints on offsetGet()
when you access it via []
operator.
For reference, the following should work (but doesn't): https://psalm.dev/r/615cfedf69
Your original snippet had too many problems to be used with taint analysis.
I found these snippets:
I found these snippets:
Is there any way to make Psalm detect the taint in this case?
Not yet, thus the enhancement
label
I found these snippets:
Given a function that takes in an object and uses one of its attributes in a taint sink, is there any way to set it as a taint source assuming it contains parameters that are user-supplied?