PHP test suite - data flow 1.0.0

Download

Author: Felix Schuckert, Hanno Langweg, Basel Katt
Language: PHP
Size: 61.5 KB
Sha256sum: c5de8128e95e3ac258dfbf7071cb2c47edbc7fe29b3d8dc14ff4f8b048270f8e
Number Of Test Cases: 20
Submission Date: 02 Aug 2022

Description

Synthetic PHP test cases focusing on XSS patterns.

Displaying all 20 test cases

CWE-79

501058-v1.0.0

Added 2 years ago

candidate

bad

Source: _GET Sanitization: nosanitization Dataflow: call_user_func_array Context: xss_plain Sink: echo_func
CWE-79

501059-v1.0.0

Added 2 years ago

candidate

bad

Source: _GET Sanitization: nosanitization Dataflow: __get__set Context: xss_plain Sink: echo_func
CWE-79

501060-v1.0.0

Added 2 years ago

candidate

bad

Source: _GET Sanitization: nosanitization Dataflow: return_reference Context: xss_plain Sink: echo_func
CWE-79

501061-v1.0.0

Added 2 years ago

candidate

bad

Source: _GET Sanitization: nosanitization Dataflow: environment_var Context: xss_plain Sink: echo_func
CWE-79

501062-v1.0.0

Added 2 years ago

candidate

bad

Source: _GET Sanitization: nosanitization Dataflow: eventmanager Context: xss_plain Sink: echo_func
CWE-79

501063-v1.0.0

Added 2 years ago

candidate

bad

Source: _GET Sanitization: nosanitization Dataflow: compare_different_types Context: xss_plain Sink: echo_func
CWE-79

501064-v1.0.0

Added 2 years ago

candidate

bad

Source: _GET Sanitization: nosanitization Dataflow: func_get_args Context: xss_plain Sink: echo_func
CWE-79

501065-v1.0.0

Added 2 years ago

candidate

bad

Source: _GET Sanitization: nosanitization Dataflow: subclass_getter Context: xss_plain Sink: echo_func
CWE-79

501066-v1.0.0

Added 2 years ago

candidate

bad

Source: _GET Sanitization: nosanitization Dataflow: function_call_by_string Context: xss_plain Sink: echo_func
CWE-79

501067-v1.0.0

Added 2 years ago

candidate

bad

Source: _GET Sanitization: nosanitization Dataflow: assignment Context: xss_plain Sink: echo_func
CWE-79

501068-v1.0.0

Added 2 years ago

candidate

bad

Source: _GET Sanitization: nosanitization Dataflow: backdoor_explode_implode Context: xss_plain Sink: echo_func
CWE-79

501069-v1.0.0

Added 2 years ago

candidate

bad

Source: _GET Sanitization: nosanitization Dataflow: call_user_func_simple Context: xss_plain Sink: echo_func
CWE-79

501070-v1.0.0

Added 2 years ago

candidate

bad

Source: _GET Sanitization: nosanitization Dataflow: singleton Context: xss_plain Sink: echo_func
CWE-79

501071-v1.0.0

Added 2 years ago

candidate

bad

Source: _GET Sanitization: nosanitization Dataflow: singleton_class Context: xss_plain Sink: echo_func
CWE-79

501072-v1.0.0

Added 2 years ago

candidate

bad

Source: _GET Sanitization: nosanitization Dataflow: call_user_func_concat Context: xss_plain Sink: echo_func
CWE-79

501073-v1.0.0

Added 2 years ago

candidate

bad

Source: _GET Sanitization: nosanitization Dataflow: singleton_set Context: xss_plain Sink: echo_func
CWE-79

501074-v1.0.0

Added 2 years ago

candidate

bad

Source: _GET Sanitization: nosanitization Dataflow: class_var_assign_string Context: xss_plain Sink: echo_func
CWE-79

501075-v1.0.0

Added 2 years ago

candidate

bad

Source: _GET Sanitization: nosanitization Dataflow: list_assignment Context: xss_plain Sink: echo_func
CWE-79

501076-v1.0.0

Added 2 years ago

candidate

bad

Source: _GET Sanitization: nosanitization Dataflow: factory_reflection Context: xss_plain Sink: echo_func
CWE-79

501077-v1.0.0

Added 2 years ago

candidate

bad

Source: _GET Sanitization: nosanitization Dataflow: global_variable Context: xss_plain Sink: echo_func

Results per page