Menu

#18 false positive : securing using array_map

open
nobody
None
5
2013-02-28
2013-02-28
Anonymous
No

when using an array_map to apply a security strategy to a whole array, the statment is detected as a sink, when it should not.
code exemple :
$secured_get = array_map('mysql_real_escape_string', $_GET);

Discussion


Log in to post a comment.

MongoDB Logo MongoDB