Download the PHP package samigitz/larasift without Composer
On this page you can find all versions of the php package samigitz/larasift. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download samigitz/larasift
More information about samigitz/larasift
Files in samigitz/larasift
Package larasift
Short Description A fast, configurable security scanner for Laravel applications.
License MIT
Homepage https://github.com/samigitz/larasift
Informations about the package larasift
LaraSift
Find common security mistakes in Laravel code before they reach production.
LaraSift scans your project, shows the exact location of each finding, and suggests a safer approach. It reads your files without starting or executing your Laravel application.
The first release checks Blade templates for unsafe, unescaped output. More Laravel security checks will be added in future releases.
Install
Install LaraSift as a development dependency in your Laravel project:
Run a scan
From your Laravel project, scan the current directory:
Show the reason for each finding and the suggested fix:
Choose what to scan
Run one category:
Run one rule:
Only show findings at or above a severity level:
JSON output
Use JSON in CI or other tools:
List the available rules
Exit codes
0: the scan completed with no matching findings1: the scan found one or more matching issues2: the command or an option was invalid3: the scan could not finish correctly
Current security check
LSEC-XSS-002 finds dynamic Blade output that uses {!! !!} without HTML escaping. It ignores escaped output, Blade comments, @verbatim blocks, and static text.
LaraSift reports potential security problems. A clean scan does not guarantee that an application is secure, and every finding should be reviewed in context.
Requirements
- PHP 8.2 or later
- A Laravel application
Security
Please do not report security vulnerabilities through public GitHub issues. Follow the private reporting instructions in SECURITY.md.
Development
Run the project checks:
Licence
LaraSift is open-source software released under the MIT licence.
All versions of larasift with dependencies
composer-runtime-api Version ^2.2
ext-json Version *
nikic/php-parser Version ^5.4
symfony/console Version ^7.2|^8.0
symfony/finder Version ^7.2|^8.0
symfony/string Version ^7.2|^8.0
symfony/yaml Version ^7.2|^8.0