You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Warning: main() [echo]: Attempt to echo a string that might be tainted in /path/to/taint-test.php on line 9
Call Stack:
0.0001 356120 1. {main}() /path/to/taint-test.php:0
some string tainted string.
However, if I instead use the concatenating assignment operator in the following script:
Running PHP 7.0.10 using the concatenating assignment operator appears to lose taint.
If I run the following script which concatenates strings normally:
I get the following output as expected:
However, if I instead use the concatenating assignment operator in the following script:
The output is simply
some string tainted string.
and no warning is raised.The text was updated successfully, but these errors were encountered: