Would be nice to add phan-taint-check-plugin to Echo extensions
<?xml version="1.0" encoding="ISO-8859-15"?> <checkstyle version="6.5"> <file name="./includes/special/SpecialNotifications.php"> <error line="106" severity="warning" message="Calling method \OOUI\HtmlSnippet::__construct() in \SpecialNotifications::execute that outputs using tainted argument $[arg #1]. (Caused by: ../../vendor/oojs/oojs-ui/php/HtmlSnippet.php +25) (Caused by: ./includes/special/SpecialNotifications.php +72)" source="SecurityCheck-XSS"/> <error line="113" severity="warning" message="Calling method \OOUI\HtmlSnippet::__construct() in \SpecialNotifications::execute that outputs using tainted argument $[arg #1]. (Caused by: ../../vendor/oojs/oojs-ui/php/HtmlSnippet.php +25) (Caused by: ./includes/special/SpecialNotifications.php +72)" source="SecurityCheck-XSS"/> <error line="154" severity="warning" message="Calling method \OOUI\LabelWidget::__construct() in \SpecialNotifications::execute that outputs using tainted argument $[arg #1]. (Caused by: ../../vendor/oojs/oojs-ui/php/widgets/LabelWidget.php +29) (Caused by: ./includes/special/SpecialNotifications.php +150)" source="SecurityCheck-DoubleEscaped"/> </file> <file name="./scripts/generatecss.php"> <error line="26" severity="warning" message="Echoing expression that was not html escaped (Caused by: ./scripts/generatecss.php +25; ./scripts/generatecss.php +6)" source="SecurityCheck-XSS"/> </file> </checkstyle>