Post #4182535
2026-07-29 04:24 UTC
A security vulnerability in PHPCSUtils revealed an eval() call in a static analysis tool. Why disable_functions cannot reach eval(), and what a switch in the PHP engine to disable it could look like:
https://phpunit.expert/articles/when-static-analysis-runs-your-code.html?ref=mastodon
Replies (1)
-
@hashbanged@phpc.social 2026-07-29 05:26
@sebastian@phpc.social Thanks for the writeup and sparking a deep dive. I hope we get to see this move forward.