https://speakerdeck.com/craigfrancis 2020-09-10 06:05:30 -0400 A way to identify trusted developer strings (aka "literals", which have been defined within the PHP script) which need to be used for HTML templates, SQL strings, CLI strings; and keep those completely separate from user controlled (attacker tainted) strings. A way to identify trusted developer strings (aka "literals", which have been defined within the PHP script) which need to be used for HTML templates, SQL strings, CLI strings; and keep those completely separate from user controlled (attacker tainted) strings. Wed, 09 Sep 2020 00:00:00 -0400 https://speakerdeck.com/craigfrancis/proposed-php-function-is-literal https://speakerdeck.com/craigfrancis/proposed-php-function-is-literal