diff --git a/RSSHooks.php b/RSSHooks.php
index 9ac4727..cf35657 100644
--- a/RSSHooks.php
+++ b/RSSHooks.php
@@ -21,6 +21,7 @@ class RSSHooks {
 	 * @param Parser $parser
 	 * @param PPFrame $frame parser context
 	 * @return string
+	 * @suppress SecurityCheck-XSS see T203210
 	 */
 	static function renderRss( $input, array $args, Parser $parser, PPFrame $frame ) {
 		global $wgRSSCacheAge, $wgRSSCacheCompare, $wgRSSNamespaces,
diff --git a/composer.json b/composer.json
index cd1ea2e..03d2b1a 100644
--- a/composer.json
+++ b/composer.json
@@ -15,5 +15,8 @@
 			"phpcs -p -s",
 			"minus-x check ."
 		]
+	},
+	"extra": {
+		"phan-taint-check-plugin": "1.3.0"
 	}
 }