enum Origin: string
Restricted visibility: declared "@visibility root". Code outside that scope must not name this declaration.

Where a value the analyzer could not pin down comes from.

The origin drives how a gap in reconstructed SQL is reported: a fragment traced back to a request superglobal is a different finding from one that merely crossed a call the analyzer declined to follow.

Cases§

case External = 'external'
case Parameter = 'parameter'
case Property = 'property'
case Call = 'call'
case Budget = 'budget'
case Unreached = 'unreached'
case Loop = 'loop'
case Branch = 'branch'
case Unresolved = 'unresolved'

Methods§

public function isExternallyControlled(): bool

How strongly a gap of this origin suggests attacker-controlled input.

Returns

bool
Calls 1
public function describe(): string

A short phrase naming the origin in reports.

Returns

string
Test cases 1
Calls 9

Test cases 179§

Test cases that cover or call this symbol, from the coverage report and from the analyzed test sources.

Dedicated tests 3
Other tests reaching this symbol 176

Relations§

Constant reads 90
Type declarations 14