Search by 
Packages from jay-tank · Transparency log
-
PHP
jay-tank/idorguard
Static analyzer that flags Laravel controller actions receiving a route-model-bound Eloquent model with no visible authorization check in the method body.
-
PHP
jay-tank/unserializeslip
Static analyzer that flags PHP Object Injection: a call to the bare global unserialize(...) on a value traceable (directly, or via a same-function local-variable assignment) to $_GET/$_POST/$_REQUEST/$_COOKIE/$_SERVER['HTTP_*']/Laravel request()->input()/$request->get()/$request->cookie(), with no [