taint

XSS code sniffer


An extension used for detecting XSS codes(tainted string),
And also can be used to spot sql injection vulnerabilities, shell inject, etc.

License: PHP

Latest releases

Version Release Download
3.0.0 2026-08-10 taint-3.0.0.tgz
2.1.0 2020-04-09 taint-2.1.0.tgz
2.0.6 2019-12-23 taint-2.0.6.tgz
2.0.5 2018-12-12 taint-2.0.5.tgz
2.0.4 2017-08-09 taint-2.0.4.tgz
Show all releases

Changelog

Version Message
3.0.0 - Support PHP 8.0 up to 8.5
- Dropped PHP 7 support (use taint 2.1.x for PHP 7.x)
- Propagate the taint mark through the frameless call fast paths (PHP 8.4+)
- Extended sink coverage (see README for the full list)
2.1.0 - Fixed conflicts with Xdebug
2.0.6 - PHP-7.4 Compatibility
2.0.5 - PHP-7.3 Compatibility
2.0.4 - PHP-7.2 Compatibility
Show complete changelog