nextcloud/lib
Lukas Reschke 3d2600b039
Add Phan plugin to check for SQL injections
This adds a phan plugin which checks for SQL injections on code using our QueryBuilder, while it isn't perfect it should already catch most potential issues.

As always, static analysis will sometimes have false positives and this is also here the case. So in some cases the analyzer just doesn't know if something is potential user input or not, thus I had to add some `@suppress SqlInjectionChecker` in front of those potential injections.

The Phan plugin hasn't the most awesome code but it works and I also added a file with test cases.

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
2017-07-20 22:48:13 +02:00
..
composer Update autoloader 2017-07-13 11:23:10 +02:00
l10n [tx-robot] updated from transifex 2017-07-15 00:08:54 +00:00
private Add Phan plugin to check for SQL injections 2017-07-20 22:48:13 +02:00
public Merge pull request #5567 from nextcloud/public-capabilities 2017-07-12 13:04:54 +02:00
autoloader.php Revert "Add a magic wrapper to allow phpunit4 to run the code again " 2017-03-20 14:25:43 +01:00
base.php Use the guest.css for the maintenance page as well 2017-06-13 16:43:25 -05:00