Description
Safe sample
input : execute a ls command using the function system, and put the last result in $tainted
SANITIZE : use preg_replace to keep only char, number and _ ,\, -
construction : use of sprintf via a %s with simple quote
Test Suites
Have any comments on this test case? Please, send us an email.