This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
1 | <?php |
||
2 | /** |
||
3 | * @author Patsura Dmitry https://github.com/ovr <[email protected]> |
||
4 | */ |
||
5 | |||
6 | namespace PHPSA\Analyzer; |
||
7 | |||
8 | use PHPSA\Analyzer; |
||
9 | use PHPSA\Configuration; |
||
10 | use Symfony\Component\Config\Definition\Builder\NodeDefinition; |
||
11 | use Webiny\Component\EventManager\EventManager; |
||
12 | use PHPSA\Analyzer\Pass as AnalyzerPass; |
||
13 | |||
14 | class Factory |
||
15 | { |
||
16 | /** |
||
17 | * @return NodeDefinition[] |
||
18 | */ |
||
19 | public static function getPassesConfigurations() |
||
20 | { |
||
21 | $configs = []; |
||
22 | |||
23 | foreach (self::getExpressionPasses() as $passClass) { |
||
24 | $configs[] = $passClass::getMetadata()->getConfiguration(); |
||
25 | } |
||
26 | |||
27 | foreach (self::getStatementPasses() as $passClass) { |
||
28 | $configs[] = $passClass::getMetadata()->getConfiguration(); |
||
29 | } |
||
30 | |||
31 | foreach (self::getScalarPasses() as $passClass) { |
||
32 | $configs[] = $passClass::getMetadata()->getConfiguration(); |
||
33 | } |
||
34 | |||
35 | return $configs; |
||
36 | } |
||
37 | |||
38 | /** |
||
39 | * @return \PHPSA\Analyzer\Pass\Metadata[] |
||
40 | */ |
||
41 | public static function getPassesMetadata() |
||
42 | { |
||
43 | $meta = []; |
||
44 | |||
45 | foreach (self::getExpressionPasses() as $passClass) { |
||
46 | $meta[] = $passClass::getMetadata(); |
||
47 | } |
||
48 | |||
49 | foreach (self::getStatementPasses() as $passClass) { |
||
50 | $meta[] = $passClass::getMetadata(); |
||
51 | } |
||
52 | |||
53 | foreach (self::getScalarPasses() as $passClass) { |
||
54 | $meta[] = $passClass::getMetadata(); |
||
55 | } |
||
56 | |||
57 | return $meta; |
||
58 | } |
||
59 | |||
60 | /** |
||
61 | * @param EventManager $eventManager |
||
62 | * @param Configuration $config |
||
63 | * @return Analyzer |
||
64 | */ |
||
65 | 1 | public static function factory(EventManager $eventManager, Configuration $config) |
|
0 ignored issues
–
show
Best Practice
introduced
by
![]() |
|||
66 | { |
||
67 | 1 | $analyzersConfig = $config->getValue('analyzers'); |
|
68 | |||
69 | 1 | $filterEnabled = function ($passClass) use ($config, $analyzersConfig) { |
|
70 | /** @var AnalyzerPass\Metadata $passMetadata */ |
||
71 | 1 | $passMetadata = $passClass::getMetadata(); |
|
72 | |||
73 | 1 | if (!isset($analyzersConfig[$passMetadata->getName()])) { |
|
74 | 1 | return false; |
|
75 | } |
||
76 | |||
77 | 1 | if (!$analyzersConfig[$passMetadata->getName()]['enabled']) { |
|
78 | return false; |
||
79 | } |
||
80 | |||
81 | 1 | if (!$passMetadata->allowsPhpVersion($config->getValue('language_level'))) { |
|
82 | return false; |
||
83 | } |
||
84 | |||
85 | 1 | return true; |
|
86 | 1 | }; |
|
87 | |||
88 | 1 | $instanciate = function ($passClass) use ($analyzersConfig) { |
|
89 | 1 | $passName = $passClass::getMetadata()->getName(); |
|
90 | |||
91 | 1 | return new $passClass($analyzersConfig[$passName]); |
|
92 | 1 | }; |
|
93 | |||
94 | 1 | $analyzer = new Analyzer($eventManager); |
|
95 | 1 | $analyzer->registerExpressionPasses( |
|
96 | 1 | array_map($instanciate, array_filter(self::getExpressionPasses(), $filterEnabled)) |
|
97 | ); |
||
98 | 1 | $analyzer->registerStatementPasses( |
|
99 | 1 | array_map($instanciate, array_filter(self::getStatementPasses(), $filterEnabled)) |
|
100 | ); |
||
101 | 1 | $analyzer->registerScalarPasses( |
|
102 | 1 | array_map($instanciate, array_filter(self::getScalarPasses(), $filterEnabled)) |
|
103 | ); |
||
104 | 1 | $analyzer->bind(); |
|
105 | |||
106 | 1 | return $analyzer; |
|
107 | } |
||
108 | |||
109 | /** |
||
110 | * @return array |
||
111 | */ |
||
112 | 1 | private static function getStatementPasses() |
|
113 | { |
||
114 | return [ |
||
115 | 1 | AnalyzerPass\Statement\MagicMethodParameters::class, |
|
116 | AnalyzerPass\Statement\GotoUsage::class, |
||
117 | AnalyzerPass\Statement\GlobalUsage::class, |
||
118 | AnalyzerPass\Statement\HasMoreThanOneProperty::class, |
||
119 | AnalyzerPass\Statement\MissingBreakStatement::class, |
||
120 | AnalyzerPass\Statement\MissingVisibility::class, |
||
121 | AnalyzerPass\Statement\MethodCannotReturn::class, |
||
122 | AnalyzerPass\Statement\UnexpectedUseOfThis::class, |
||
123 | AnalyzerPass\Statement\TestAnnotation::class, |
||
124 | AnalyzerPass\Statement\MissingDocblock::class, |
||
125 | AnalyzerPass\Statement\OldConstructor::class, |
||
126 | AnalyzerPass\Statement\ConstantNaming::class, |
||
127 | AnalyzerPass\Statement\MissingBody::class, |
||
128 | AnalyzerPass\Statement\InlineHtmlUsage::class, |
||
129 | AnalyzerPass\Statement\AssignmentInCondition::class, |
||
130 | AnalyzerPass\Statement\StaticUsage::class, |
||
131 | AnalyzerPass\Statement\OptionalParamBeforeRequired::class, |
||
132 | AnalyzerPass\Statement\YodaCondition::class, |
||
133 | AnalyzerPass\Statement\ForCondition::class, |
||
134 | AnalyzerPass\Statement\PropertyDefinitionDefaultValue::class, |
||
135 | AnalyzerPass\Statement\ReturnAndYieldInOneMethod::class, |
||
136 | AnalyzerPass\Statement\ReturnVoid::class, |
||
137 | ]; |
||
138 | } |
||
139 | |||
140 | /** |
||
141 | * @return array |
||
142 | */ |
||
143 | 1 | private static function getExpressionPasses() |
|
144 | { |
||
145 | return [ |
||
146 | // Another |
||
147 | 1 | AnalyzerPass\Expression\ErrorSuppression::class, |
|
148 | AnalyzerPass\Expression\MultipleUnaryOperators::class, |
||
149 | AnalyzerPass\Expression\StupidUnaryOperators::class, |
||
150 | AnalyzerPass\Expression\VariableVariableUsage::class, |
||
151 | AnalyzerPass\Expression\Casts::class, |
||
152 | AnalyzerPass\Expression\EvalUsage::class, |
||
153 | AnalyzerPass\Expression\FinalStaticUsage::class, |
||
154 | AnalyzerPass\Expression\CompareWithArray::class, |
||
155 | AnalyzerPass\Expression\DivisionFromZero::class, |
||
156 | AnalyzerPass\Expression\DivisionByOne::class, |
||
157 | AnalyzerPass\Expression\BacktickUsage::class, |
||
158 | AnalyzerPass\Expression\LogicInversion::class, |
||
159 | AnalyzerPass\Expression\ExitUsage::class, |
||
160 | AnalyzerPass\Expression\NestedTernary::class, |
||
161 | AnalyzerPass\Expression\AssignRefNew::class, |
||
162 | // Arrays |
||
163 | AnalyzerPass\Expression\ArrayShortDefinition::class, |
||
164 | AnalyzerPass\Expression\ArrayDuplicateKeys::class, |
||
165 | AnalyzerPass\Expression\ArrayIllegalOffsetType::class, |
||
166 | // Closures |
||
167 | AnalyzerPass\Expression\DuplicatedVariablesInUseClosure::class, |
||
168 | // Function call |
||
169 | AnalyzerPass\Expression\FunctionCall\AliasCheck::class, |
||
170 | AnalyzerPass\Expression\FunctionCall\DebugCode::class, |
||
171 | AnalyzerPass\Expression\FunctionCall\RandomApiMigration::class, |
||
172 | AnalyzerPass\Expression\FunctionCall\SleepUsage::class, |
||
173 | AnalyzerPass\Expression\FunctionCall\UseCast::class, |
||
174 | AnalyzerPass\Expression\FunctionCall\DeprecatedIniOptions::class, |
||
175 | AnalyzerPass\Expression\FunctionCall\RegularExpressions::class, |
||
176 | AnalyzerPass\Expression\FunctionCall\ArgumentUnpacking::class, |
||
177 | AnalyzerPass\Expression\FunctionCall\UnsafeUnserialize::class, |
||
178 | AnalyzerPass\Expression\FunctionCall\DeprecatedFunctions::class, |
||
179 | AnalyzerPass\Expression\FunctionCall\FunctionStringFormater::class, |
||
180 | ]; |
||
181 | } |
||
182 | |||
183 | /** |
||
184 | * @return array |
||
185 | */ |
||
186 | 1 | private static function getScalarPasses() |
|
187 | { |
||
188 | return [ |
||
189 | 1 | AnalyzerPass\Scalar\CheckLNumberKind::class, |
|
190 | ]; |
||
191 | } |
||
192 | } |
||
193 |