17 Commits (2e4cc6da17028e777dc223689f1b9964ff2a4d8f)

Author	SHA1	Message	Date
Daniel Kesselberg	99358d70e8	Remove settings/ from phan ... settings is a app now. so the directory does not exist. Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>	6 years ago
Christoph Wurst	de6940352a	Move settings to an app ... Signed-off-by: Christoph Wurst <christoph@winzerhof-wurst.at> Signed-off-by: npmbuildbot[bot] <npmbuildbot[bot]@users.noreply.github.com>	6 years ago
Roeland Jago Douma	cf7bc3fe9d	Fix phan ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Roeland Jago Douma	d2f9366b39	Run less phan processes ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	7 years ago
Morris Jobke	13b503a1a4	Check doc block signature to match the specified return type ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	8 years ago
Lukas Reschke	3aaa2307e9	Improve phan config ... * exclude routes Signed-off-by: Lukas Reschke <lukas@statuscode.ch> Signed-off-by: Morris Jobke <hey@morrisjobke.de>	8 years ago
Morris Jobke	1f06bc246c	Declare func() as safe method in phan ... We added a special `func()` method to the query builder, which is a plain text function by definition. It uses the string and does no escaping on purpose. It has the potential for an injection but requiring to add the "supress warning" to all surrounding code makes it harder to spot actual problems, that this plugin want to find. So it's better to only need to check the func() and not all the surrounding code as well. Signed-off-by: Morris Jobke <hey@morrisjobke.de>	8 years ago
Morris Jobke	c930f70b52	Harden phan checks to catch more errors ... Signed-off-by: Morris Jobke <hey@morrisjobke.de>	8 years ago
Roeland Jago Douma	2f36744aff	Update phan config ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Roeland Jago Douma	ab20a64ed4	DAV Autoloader ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Roeland Jago Douma	112b0d57a8	Comments Autoloader ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Roeland Jago Douma	ce7c9dfe8a	Admin Audit autoloader ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Roeland Jago Douma	ff9f325677	Ignore composer stuff in phan ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Roeland Jago Douma	17bd2fb268	Phan is moved to a new repo ... Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl>	8 years ago
Lukas Reschke	3d2600b039	Add Phan plugin to check for SQL injections ... This adds a phan plugin which checks for SQL injections on code using our QueryBuilder, while it isn't perfect it should already catch most potential issues. As always, static analysis will sometimes have false positives and this is also here the case. So in some cases the analyzer just doesn't know if something is potential user input or not, thus I had to add some `@suppress SqlInjectionChecker` in front of those potential injections. The Phan plugin hasn't the most awesome code but it works and I also added a file with test cases. Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	9 years ago
Lukas Reschke	591aaa4154	Add workaround for https://github.com/etsy/phan/issues/1033 ... Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	9 years ago
Lukas Reschke	d8ec399454	Run phan over code base ... Signed-off-by: Lukas Reschke <lukas@statuscode.ch>	9 years ago