mirror of https://github.com/danog/psalm.git synced 2024-12-11 16:59:45 +01:00

Ref #4590

2021-01-29 11:46:13 +01:00

TaintedShell

Emitted when user-controlled input can be passed into to an exec call or similar.

<?php

$command = $_GET["command"];

runCode($command);

function runCode(string $command) {
    exec($command);
}