From c3c1f06758d9fc1a9e21e9c151200c82b0ab78bc Mon Sep 17 00:00:00 2001
From: Daniil Gentili <daniil@daniil.it>
Date: Mon, 5 Oct 2026 18:34:36 +0200
Subject: [PATCH 1/2] Update baseline for the taint of exception messages
 (vimeo/psalm#12139)

---
 .psalm/baseline.xml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/.psalm/baseline.xml b/.psalm/baseline.xml
index 27e4e83b794..d7c19b76186 100644
--- a/.psalm/baseline.xml
+++ b/.psalm/baseline.xml
@@ -5405,6 +5405,7 @@
       <code><![CDATA[!$configurationFile]]></code>
     </RiskyTruthyFalsyComparison>
     <TaintedHtml>
+      <code><![CDATA[$message]]></code>
       <code><![CDATA[$t->getTraceAsString()]]></code>
       <code><![CDATA[print Version::getVersionString() . PHP_EOL . PHP_EOL . $message . PHP_EOL]]></code>
     </TaintedHtml>
@@ -5632,6 +5633,12 @@
     <RiskyTruthyFalsyComparison>
       <code><![CDATA[!$argument]]></code>
     </RiskyTruthyFalsyComparison>
+    <TaintedHtml>
+      <code><![CDATA[print $e->getMessage() . PHP_EOL]]></code>
+    </TaintedHtml>
+    <TaintedTextWithQuotes>
+      <code><![CDATA[print $e->getMessage() . PHP_EOL]]></code>
+    </TaintedTextWithQuotes>
   </file>
   <file src="src/TextUI/Configuration/Value/ConstantCollection.php">
     <ImpureMethodCall>

From 3ddc7b50e5de1d794e8fdd6bf43d28541364c6f5 Mon Sep 17 00:00:00 2001
From: Daniil Gentili <daniil@daniil.it>
Date: Wed, 7 Oct 2026 16:15:29 +0200
Subject: [PATCH 2/2] Baseline the file flows from PHP_SELF in the result cache

---
 .psalm/baseline.xml | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/.psalm/baseline.xml b/.psalm/baseline.xml
index d7c19b76186..0465da8b668 100644
--- a/.psalm/baseline.xml
+++ b/.psalm/baseline.xml
@@ -4970,6 +4970,17 @@
       <code><![CDATA[status]]></code>
       <code><![CDATA[time]]></code>
     </MissingPureAnnotation>
+    <TaintedFile>
+      <code><![CDATA[file_get_contents($this->cacheFilename)]]></code>
+      <code><![CDATA[file_put_contents(
+            $this->cacheFilename,
+            json_encode($data),
+            LOCK_EX,
+        )]]></code>
+    </TaintedFile>
+    <TaintedSSRF>
+      <code><![CDATA[file_get_contents($this->cacheFilename)]]></code>
+    </TaintedSSRF>
   </file>
   <file src="src/Runner/ResultCache/NullResultCache.php">
     <MissingOverrideAttribute>
@@ -6626,6 +6637,11 @@
       <code><![CDATA[isScalarOrArrayOfScalars]]></code>
     </MissingPureAnnotation>
   </file>
+  <file src="src/Util/Filesystem.php">
+    <TaintedFile>
+      <code><![CDATA[mkdir($directory, 0o777, true)]]></code>
+    </TaintedFile>
+  </file>
   <file src="src/Util/GlobalState.php">
     <MissingPureAnnotation>
       <code><![CDATA[arrayOnlyContainsScalars]]></code>