From ed5bc006e4a042c038792ad5d906dc4361ceb343 Mon Sep 17 00:00:00 2001 From: Gabor Gyorvari Date: Fri, 30 Nov 2018 11:40:47 +0100 Subject: [PATCH] Signature update reported in #42 --- definitions/patterns_re.txt | 3 +++ 1 file changed, 3 insertions(+) diff --git a/definitions/patterns_re.txt b/definitions/patterns_re.txt index e90d604..1165e66 100644 --- a/definitions/patterns_re.txt +++ b/definitions/patterns_re.txt @@ -105,3 +105,6 @@ function\s+_[0-9]{8,}\( # escaped include with error hiding @include ".*?(\\x[0-9a-f]{2,}.*?){2,}.*?"; + +# create_function is dangerous as like eval() see http://php.net/manual/en/function.create-function.php +create_function\s*\(\s*['"]{2} \ No newline at end of file