Fix: Argument of a function used in an include/require, could lead to…

… File Inclusion Error from semgrep audit.php.lang.security.file.inclusion-arg
symfony · Aug 29, 2024 · 4f5260c · 4f5260c
1 parent c0fee7a
commit 4f5260c
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/Mbstring/Mbstring.php b/src/Mbstring/Mbstring.php
@@ -953,8 +953,8 @@ private static function title_case(array $s)
 
     private static function getData($file)
     {
-        if (file_exists($file = __DIR__.'/Resources/unidata/'.$file.'.php')) {
-            return require $file;
+        if (file_exists(__DIR__.'/Resources/unidata/'.$file.'.php')) {
+            return require __DIR__.'/Resources/unidata/'.$file.'.php';
         }
 
         return false;