mirror of
https://github.com/danog/psalm.git
synced 2024-11-27 12:55:26 +01:00
307 B
307 B
TaintedCallable
Emitted when tainted text is used in an aribtary function call.
This can lead to dangerous situations, like running arbitrary functions.
<?php
$name = $_GET["name"];
evalCode($name);
function evalCode(string $name) {
if (is_callable($name)) {
$name();
}
}