Taint-check in your browser

use Phan\Config;
use Phan\Issue;
use Phan\IssueInstance;
use Phan\Output\HTML;
use Phan\Output\IssuePrinterInterface;
use Symfony\Component\Console\Output\OutputInterface;

use Phan\CLI;
use Phan\Phan;
error_reporting(E_ALL);
ini_set('display_errors', 'stderr');
putenv('NO_COLOR=1');

try {
    $phar_path = 'taint-check.phar';
    if (!file_exists($phar_path)) {
        fwrite(STDERR, "Could not load '$phar_path' - this may not have been included when generating this site with emscripten\n");
        exit(1);
    }

$phar = "phar://$phar_path";
    $phan_path = $phar . '/vendor/phan/phan';
    gc_disable();
    $data = require($phan_path . '/src/Phan/Language/Internal/ClassDocumentationMap.php');
    require_once($phan_path . '/src/requirements.php');

$code_base = require_once($phan_path . '/src/codebase.php');

require_once($phan_path . '/src/Phan/Bootstrap.php');

$taintCheckPath = 'phan-taint-check-plugin';

file_put_contents('input', $CONTENTS_TO_ANALYZE);
Config::setValue('file_list', ['input']);

Config::setValue('plugins', [
    "$phar/GenericSecurityCheckPlugin.php"
]);

$taintCheckConfig = require_once "$phar/scripts/base-config.php";

// This is the list used by base-config.php in taint-check
Config::setValue( 'whitelist_issue_types', $taintCheckConfig['whitelist_issue_types'] );

$cli = CLI::fromRawValues([
    'output-mode' => 'html',
    'allow-polyfill-parser' => false,
    'use-fallback-parser' => false,
    'redundant-condition-detection' => false,
    'dead-code-detection' => false,
    'no-progress-bar' => false,
], []);

// Analyze the file list provided via the CLI
$is_issue_found = Phan::analyzeFileList(
    $code_base,
    function (bool $recompute_file_list = false) use ($cli) : array {
        return $cli->getFileList();
    }
);
} catch (\Throwable $e) {
    echo "Caught $e\n";
}