php-security-linter

2 Commits 1 Branch 1 Tag

Author	SHA1	Message	Date
Yutaka Kurosaki	b1cbddfa76	Fix: handle missing values for options like -s, -f, -o, -l, -d When options that require values (e.g., -s, -f) are followed by another flag (e.g., -s -c), the parser set them to boolean true instead of their expected string value, causing TypeError. Now these options properly fall back to defaults when no value is provided. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-01-31 15:24:30 +09:00
Yutaka Kurosaki	6280290898	Initial commit: PHP/Laravel Security Linter v1.0.0 A static security analysis tool for PHP and Laravel applications with recursive taint analysis capabilities. Features: - Comprehensive vulnerability detection (XSS, SQL Injection, Command Injection, Path Traversal, CSRF, Authentication issues) - Recursive taint analysis across function calls - Blade template analysis with context-aware XSS detection - Smart escape detection and escape bypass detection - Syntax highlighting in terminal output - Multi-language support (Japanese/English) - Docker support for easy deployment - Multiple output formats (text, JSON, HTML, SARIF, Markdown) - CI/CD integration ready (GitHub Actions, GitLab CI) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-01-31 15:18:53 +09:00

Author

SHA1

Message

Date

Yutaka Kurosaki

b1cbddfa76

Fix: handle missing values for options like -s, -f, -o, -l, -d

When options that require values (e.g., -s, -f) are followed by
another flag (e.g., -s -c), the parser set them to boolean true
instead of their expected string value, causing TypeError.

Now these options properly fall back to defaults when no value
is provided.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

2026-01-31 15:24:30 +09:00

Yutaka Kurosaki

6280290898

Initial commit: PHP/Laravel Security Linter v1.0.0

A static security analysis tool for PHP and Laravel applications
with recursive taint analysis capabilities.

Features:
- Comprehensive vulnerability detection (XSS, SQL Injection,
  Command Injection, Path Traversal, CSRF, Authentication issues)
- Recursive taint analysis across function calls
- Blade template analysis with context-aware XSS detection
- Smart escape detection and escape bypass detection
- Syntax highlighting in terminal output
- Multi-language support (Japanese/English)
- Docker support for easy deployment
- Multiple output formats (text, JSON, HTML, SARIF, Markdown)
- CI/CD integration ready (GitHub Actions, GitLab CI)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

2026-01-31 15:18:53 +09:00