Replace TaintAnalysis test by .phpt

psalm · Mar 17, 2024 · 220ca96 · 220ca96
1 parent 1450620
commit 220ca96
Show file tree

Hide file tree

Showing 3 changed files with 27 additions and 47 deletions.
diff --git a/tests/Acceptance/acceptance/TaintAnalysis.feature b/tests/Acceptance/acceptance/TaintAnalysis.feature
diff --git a/tests/Type/tests/TaintAnalysis/TaintedHtml.phpt b/tests/Type/tests/TaintAnalysis/TaintedHtml.phpt
@@ -0,0 +1,13 @@
+--ARGS--
+--no-progress --no-diff --config=./tests/Type/psalm.xml --taint-analysis
+--FILE--
+<?php declare(strict_types=1);
+
+function test_db_raw(\Illuminate\Http\Request $request) {
+    $taint_input = $request->input('foo');
+
+    return new \Illuminate\Http\Response($taint_input);
+}
+?>
+--EXPECTF--
+TaintedHtml on line %d: Detected tainted HTML
diff --git a/tests/Type/tests/TaintAnalysis/TaintedSql.phpt b/tests/Type/tests/TaintAnalysis/TaintedSql.phpt
@@ -0,0 +1,14 @@
+--ARGS--
+--no-progress --no-diff --config=./tests/Type/psalm.xml --taint-analysis
+--FILE--
+<?php declare(strict_types=1);
+
+function test_db_raw(\Illuminate\Http\Request $request) {
+    $query_builder = new \Illuminate\Database\Query\Builder();
+    $user_input = $request->input('foo');
+
+    $query_builder->raw($user_input);
+}
+?>
+--EXPECTF--
+TaintedSql on line %d: Detected tainted SQL