mirror of
https://github.com/danog/psalm.git
synced 2025-01-08 14:08:43 +01:00
13 lines
251 B
Markdown
13 lines
251 B
Markdown
# TaintedXpath
|
|
|
|
Emitted when user-controlled input can be passed into a xpath query.
|
|
|
|
```php
|
|
<?php
|
|
|
|
function queryExpression(SimpleXMLElement $xml) : array|false|null {
|
|
$expression = $_GET["expression"];
|
|
return $xml->xpath($expression);
|
|
}
|
|
```
|