Morris Jobke 1f06bc246c Declare func() as safe method in phan ... We added a special `func()` method to the query builder, which is a plain text function by definition. It uses the string and does no escaping on purpose. It has the potential for an injection but requiring to add the "supress warning" to all surrounding code makes it harder to spot actual problems, that this plugin want to find. So it's better to only need to check the func() and not all the surrounding code as well. Signed-off-by: Morris Jobke <hey@morrisjobke.de>		2018-04-17 10:58:00 +02:00
..
plugins	Declare func() as safe method in phan	2018-04-17 10:58:00 +02:00
stubs	Run phan over code base	2017-07-19 10:28:11 +02:00
tests	Add Phan plugin to check for SQL injections	2017-07-20 22:48:13 +02:00
config.php	Harden phan checks to catch more errors	2017-11-27 07:53:56 +01:00
plugin-checker.php	Declare func() as safe method in phan	2018-04-17 10:58:00 +02:00