Dynamic (#77)

tests/dynamic_fixtures/php_frameworks/symfony/benign.php

@@ -0,0 +1,35 @@
+<?php
+// Symfony-style route via RouteCollection and HttpKernel, benign sanitised payload.
+
+namespace App\Controller;
+
+use Symfony\Component\HttpFoundation\Response;
+use Symfony\Component\Routing\Attribute\Route;
+use Symfony\Component\Routing\Route as SymfonyRoute;
+use Symfony\Component\Routing\RouteCollection;
+
+function nyx_register_routes(RouteCollection $routes): void
+{
+    $routes->add('nyx_run', new SymfonyRoute(
+        '/run/{payload}',
+        ['_controller' => [new UserController(), 'run']],
+        [],
+        [],
+        '',
+        [],
+        ['GET']
+    ));
+}
+
+class UserController
+{
+    #[Route('/run/{payload}', methods: ['GET'])]
+    public function run(string $payload): Response
+    {
+        echo "__NYX_SINK_HIT__\n";
+        $cmd = "true " . escapeshellarg($payload);
+        $out = shell_exec($cmd) ?? '';
+        echo $out;
+        return new Response($out);
+    }
+}