Alexandr Tatulchenkov dzentota

## client.php
<?php

use Sugarcrm\Sugarcrm\Security\HttpClient\ExternalResourceClient;
use Sugarcrm\Sugarcrm\Security\HttpClient\RequestException;

require 'vendor/autoload.php';

$ch = curl_init();

$url = 'https://httpbin.org/get';

## xss.html
<html>
<head>
  <script>

parent.window.location.href = 'https://www.salesforce.com';

  </script>
  </head>
</html>

## ItemName.php
<?php
declare(strict_types=1);

final class ItemName
{
    private $value;

    private function __contruct()
    {}


## unmerged.php
#!/usr/bin/env php
<?php

error_reporting(E_ALL);
ini_set('display_errors',1);

$token = '<your github token>';
$username = '<your github username>';

function query($condition)

## format-stmt.php
<?php

function format_sugar_query(SugarQuery $query)
{
    return format_builder(
        $query->compile()
    );
}

function format_builder(\Doctrine\DBAL\Query\QueryBuilder $builder)
	<?php

	use Sugarcrm\Sugarcrm\Security\HttpClient\ExternalResourceClient;
	use Sugarcrm\Sugarcrm\Security\HttpClient\RequestException;

	require 'vendor/autoload.php';

	$ch = curl_init();

	$url = 'https://httpbin.org/get';
	<html>
	<head>
	<script>

	parent.window.location.href = 'https://www.salesforce.com';

	</script>
	</head>
	</html>
	<?php
	declare(strict_types=1);

	final class ItemName
	{
	private $value;

	private function __contruct()
	{}
	#!/usr/bin/env php
	<?php

	error_reporting(E_ALL);
	ini_set('display_errors',1);

	$token = '<your github token>';
	$username = '<your github username>';

	function query($condition)
	<?php

	function format_sugar_query(SugarQuery $query)
	{
	return format_builder(
	$query->compile()
	);
	}

	function format_builder(\Doctrine\DBAL\Query\QueryBuilder $builder)