jaytank_dev's packages

• PHP

  jay-tank/idorguard

  Static analyzer that flags Laravel controller actions receiving a route-model-bound Eloquent model with no visible authorization check in the method body.

  1 0

• PHP

  jay-tank/unserializeslip

  Static analyzer that flags PHP Object Injection: a call to the bare global unserialize(...) on a value traceable (directly, or via a same-function local-variable assignment) to $_GET/$_POST/$_REQUEST/$_COOKIE/$_SERVER['HTTP_*']/Laravel request()->input()/$request->get()/$request->cookie(), with no [

  0 0