Commit Graph

7 Commits

Author SHA1 Message Date
Lukas Reschke
3d2600b039 Add Phan plugin to check for SQL injections
This adds a phan plugin which checks for SQL injections on code using our QueryBuilder, while it isn't perfect it should already catch most potential issues.

As always, static analysis will sometimes have false positives and this is also here the case. So in some cases the analyzer just doesn't know if something is potential user input or not, thus I had to add some `@suppress SqlInjectionChecker` in front of those potential injections.

The Phan plugin hasn't the most awesome code but it works and I also added a file with test cases.

Signed-off-by: Lukas Reschke <lukas@statuscode.ch>
2017-07-20 22:48:13 +02:00
Joas Schilling
0215b004da Update with robin 2016-07-21 18:13:58 +02:00
Joas Schilling
ba87db3fcc Fix others 2016-07-21 18:13:57 +02:00
Lukas Reschke
aba539703c Update license headers 2016-05-26 19:57:24 +02:00
Roeland Jago Douma
7b3191705c Let the querybuilder convert 2016-04-14 11:32:34 +02:00
Robin Appelman
68746e1bdb chunk the cleaning up of shared locks 2016-04-14 11:32:34 +02:00
Roeland Jago Douma
86e757d2b3 Move \OC\Lock to PSR-4 2016-04-14 08:28:16 +02:00