1
0
mirror of https://github.com/danog/psalm.git synced 2024-12-05 21:19:03 +01:00
psalm/docs/running_psalm/issues/TaintedCallable.md

20 lines
308 B
Markdown
Raw Normal View History

2020-11-20 01:01:19 +01:00
# TaintedCallable
2022-08-20 23:29:03 +02:00
Emitted when tainted text is used in an arbitrary function call.
This can lead to dangerous situations, like running arbitrary functions.
```php
<?php
$name = $_GET["name"];
evalCode($name);
function evalCode(string $name) {
if (is_callable($name)) {
$name();
}
}
```