TaintedExtract.md

TaintedExtract

Emitted when user-controlled array can be passed into an extract call.

<?php

$array = $_GET;
extract($array);