Commit Graph

32 Commits

Author SHA1 Message Date
Thomas Landauer
f71a68f0f6
[doc] minor formatting improvements (#207) 2021-08-24 16:03:28 +03:00
Thomas Landauer
0524e87862
[doc] Adding <MissingFile> for config/preload.php (#206)
Closes https://github.com/psalm/psalm-plugin-symfony/issues/205
2021-08-24 07:43:03 +03:00
Thomas Landauer
72911c5615
Adding <extraFiles> doc for Symfony 5.3+ (#203) 2021-08-22 14:31:17 +03:00
Adrien LUCAS
4ec19385d4
[tainting] Twig print should not be an actual taint sink (#123)
* Twig print should not be a sink

* Add links to the test cases for tainting twig

* Update psalm

* Force typing of Request:: to ensure taint detection

* Fix test using old hooks mechanism.
2021-01-16 16:03:43 +03:00
Kevin EMO
5f864829c9
[docs] Enhanced parts of the README.md file (#131) 2021-01-14 16:09:08 +03:00
Farhad Safarov
c3ec6040b5
[routing] add RouteCollection stub (#125) 2020-12-23 20:49:57 +03:00
Adrien LUCAS
f5e4b97c53
[docs] improve the twig tainting documentation (#121) 2020-12-14 19:37:22 +03:00
Farhad Safarov
9dc1c34e88
[container] support subscribed services in child classes (#102) 2020-11-15 21:52:47 +03:00
Farhad Safarov
e750732ee2
[container] support service subscriber & locator (#101)
* [container] support service subscriber

* no message
2020-11-14 13:18:54 +03:00
Adrien LUCAS
4eb4dae6ea
Tainting twig (#61)
* Taint Request::get and Response::__construct

* Taint Request::request, Request::query & Request::cookies

* Taint Request::headers (only for the user-agent header)

* Taint HeaderBag::__toString (and a fix of psalm taint api usage)

* Taint InputBag::all

* Fix type resolving

* Bump psalm requirement

* refactoring first scenario outline

* Refactor RequestTaint

* no message

* Taint HeaderBag using the MethodReturnTypeProviderInterface

* Skip tests when dependencies too low

* Taint Request::get and Response::__construct

* Taint Request::headers (only for the user-agent header)

* wip

* Try using MethodReturnTypeProviderInterface

* Compiling templates

* Make it work using fake call

* Explicitely load compliled twig files

* wip

* Add more direct way of tainting output

* wip

* Add real twig template analyzer

* Refactor

* Little fixes

* Change namespace from Taint to Twig

* Refactoring

* Some type fixing

* Fix CS

* Guess template-to-cache mapping instead of using the twig env.

* Fix typing

* Last minutes changes

* Change test group

* Update README

* fix TemplateFileAnalyzer path in readme

Co-authored-by: Farhad Safarov <farhad.safarov@gmail.com>
Co-authored-by: Brown <github@muglug.com>
2020-09-13 19:37:26 +03:00
Farhad Safarov
25c91fd99a
PropertyNotSetInConstructor error is not raised when class is an Annotation (#65) 2020-08-01 18:07:39 +03:00
Anton Zagorskii
7fb4a082cf
totallyTyped is deprecated, changed to errorLevel="1" (#56)
Co-authored-by: Anton Zagorskii <anton@paytronix.io>
2020-07-19 11:28:57 +03:00
Michel Hunziker
e6ae163a54
Add envelope stub to provide the correct argument and return types (#53)
* Add envelope stub to provide the correct argument and return types

* Use a custom test stamp
2020-07-06 06:29:10 +03:00
Adrien LUCAS
4b826dc432
Taint Request::get and Response::__construct (#50)
* Taint Request::get and Response::__construct

* no message

Co-authored-by: Farhad Safarov <farhad.safarov@gmail.com>
2020-07-02 14:27:48 +03:00
Farhad Safarov
fb2eb766e4
naming convention for parameters (#52) 2020-06-28 09:04:40 +03:00
Farhad Safarov
b9f4745e28
HeaderBag get default value return type (#49) 2020-06-26 14:58:43 +03:00
Farhad Safarov
76ff9a0f8e
[container] multiple container xml file support (#45) 2020-06-19 16:18:31 +03:00
Farhad Safarov
55aa860581
Detect naming violations & container handler refactor (#29)
* refactor container handler

* readme
2020-05-16 06:06:51 +03:00
Farhad Safarov
d567d3116b
HeaderBag get return type (#24)
* header bag stub

* no message

* no message
2020-04-14 17:21:05 +03:00
Farhad Safarov
446a6fb2d0
console handler (#22)
* console handler - fixes #17

* no message

* no message
2020-04-12 17:56:21 +03:00
Matthew Brown
007d3c6511
Add creator 2020-03-13 12:28:45 -04:00
Ben Davies
32b2307316 Github Actions: fix badge 2020-03-13 16:16:51 +00:00
Ben Davies
01a5875f7f Replace Travis with GitHub Actions 2020-03-13 15:55:14 +00:00
Matthew Brown
d78af0c3cd
Fix ref 2020-03-13 11:00:11 -04:00
Matthew Brown
d21ccc2307 Migrate Seferov => Psalm 2020-03-13 10:51:18 -04:00
Matthew Brown
a1f37c396b
Update references 2020-03-13 10:45:04 -04:00
Farhad Safarov
d2f0447add
add class to codebase if service is used by id (#10)
* add class to codebase if service is used by id

* fix doc
2020-03-11 16:43:52 +03:00
Farhad Safarov
247647254d
refactor container check (#8)
* refactor container check

* no message

* no message

* no message
2020-03-09 15:24:39 +03:00
Farhad Safarov
4e45a9d033
Detect ContainerInterface::get() result type (#6) 2020-01-03 07:45:29 +03:00
Farhad Safarov
c2924cb89a
[feature] request getContent return type fix (#5) 2019-12-06 12:25:16 +03:00
Farhad Safarov
d1f94392cf
acceptance tests (#3) 2019-11-14 10:27:50 +03:00
Farhad Safarov
378289cbe1 initial commit 2019-11-12 16:36:05 +03:00