Add unserialize as possible injection entry

[christiaan]

The unserialize function should also generate a warning when called with a tainted variable. See https://www.owasp.org/index.php/PHP_Object_Injection

[laruence]

thanks for the hinting, this is implemented in php7 version taint