Is there a (preferably static) Taint analysis tool for PHP, which can visualize the result (e.g. as a call graph) in an output format suitable for a CI environment? (e.g. html) It would be good if you could define your own sinks too.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.