Taint detection does not work for closure use references or reference params

[TysonAndre]

Expected: Possibly have a way to analyse flows as if the reference param was just passed by value Observed: No TaintedInput issue was emitted

Low priority since this is an unrealistic use of references to test taint detection

https://psalm.dev/r/80a6231940

[psalm-github-bot[bot]]

I found these snippets:

https://psalm.dev/r/80a6231940

```php

[ohader]

It looks like this is not detected for "plain" closures. https://psalm.dev/r/4028363b36

Don't know (yet) whether there are any other alternative to annotate those closures (evaluated during runtime). Thanks in advance for any pointer on this topic.

[psalm-github-bot[bot]]

I found these snippets:

https://psalm.dev/r/4028363b36

```php */ private $handlers = []; /** * @psalm-param \Closure $handler */ public function addHandler(\Closure $handler): void { $this->handlers[] = $handler; } public function handle(string $data): void { foreach ($this->handlers as $handler) { $handler($data); } } } $handler = function(string $data): void { exec($data); }; $pool = new HandlerPool(); $pool->addHandler($handler); $pool->handle((string)($_GET['inject'] ?? '')); ``` ``` Psalm output (using commit 39e61ae): No issues! ```