https://github.com/nextcloud/php-static-scanner-instrumentalization

Instrumentalizes the Nextcloud PHP code to be scanned with static PHP source code scanners
https://github.com/nextcloud/php-static-scanner-instrumentalization

Last synced: 3 months ago
JSON representation

Instrumentalizes the Nextcloud PHP code to be scanned with static PHP source code scanners

• Host: GitHub
• URL: https://github.com/nextcloud/php-static-scanner-instrumentalization
• Owner: nextcloud
• License: agpl-3.0
• Created: 2016-12-20T12:26:19.000Z (over 7 years ago)
• Default Branch: master
• Last Pushed: 2016-12-27T19:47:58.000Z (over 7 years ago)
• Last Synced: 2024-04-09T23:17:50.218Z (3 months ago)
• Language: PHP
• Size: 266 KB
• Stars: 1
• Watchers: 3
• Forks: 5
• Open Issues: 2
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Lists

• awesome-nextcloud - php-static-scanner-instrumentalization - Instrumentalizes the NC PHP code to be scanned with static PHP source code scanners (Sync / Misc /Plugins)

README

        
# PHP Static Scanner Instrumentalization

Static security scanners usually are not clever enough to detect our injection of parameters in the Nextcloud source code.

This instrumentalization script loops over a given directory and instrumentalizes the source code by directly injecting

a `$_GET` on code related to the Nextcloud appframework. So the original code would look like:

```php