Skip to content

Latest commit

 

History

History
19 lines (13 loc) · 308 Bytes

TaintedCallable.md

File metadata and controls

19 lines (13 loc) · 308 Bytes

TaintedCallable

Emitted when tainted text is used in an arbitrary function call.

This can lead to dangerous situations, like running arbitrary functions.

<?php

$name = $_GET["name"];

evalCode($name);

function evalCode(string $name) {
    if (is_callable($name)) {
        $name();
    }
}