Enable UnserializeRule only for bleeding edge

Author: eliashaeussler

conf/bleedingEdge.neon

@@ -7,6 +7,7 @@ parameters:
 		stricterFunctionMap: true
 		reportPreciseLineForUnusedFunctionParameter: true
 		checkPrintfParameterTypes: true
+		checkUnserializeFunction: true
 		internalTag: true
 		newStaticInAbstractClassStaticMethod: true
 		checkExtensionsForComparisonOperators: true

conf/config.level5.neon

@@ -14,6 +14,8 @@ conditionalTags:
 		phpstan.rules.rule: %featureToggles.checkDateIntervalConstructor%
 	PHPStan\Rules\Functions\SortWithoutEffectRule:
 		phpstan.rules.rule: %featureToggles.sortWithoutEffect%
+	PHPStan\Rules\Functions\UnserializeRule:
+		phpstan.rules.rule: %featureToggles.checkUnserializeFunction%
 
 autowiredAttributeServices:
 	# registers rules with #[RegisteredRule] attribute
@@ -33,3 +35,7 @@ services:
 		arguments:
 			treatPhpDocTypesAsCertain: %treatPhpDocTypesAsCertain%
 			treatPhpDocTypesAsCertainTip: %tips.treatPhpDocTypesAsCertain%
+	-
+		class: PHPStan\Rules\Functions\UnserializeRule
+		arguments:
+			checkInsecureUnserialize: %checkInsecureUnserialize%

conf/config.neon

@@ -39,6 +39,7 @@ parameters:
 		stricterFunctionMap: false
 		reportPreciseLineForUnusedFunctionParameter: false
 		checkPrintfParameterTypes: false
+		checkUnserializeFunction: false
 		internalTag: false
 		newStaticInAbstractClassStaticMethod: false
 		checkExtensionsForComparisonOperators: false

conf/parametersSchema.neon

@@ -36,6 +36,7 @@ parametersSchema:
 		stricterFunctionMap: bool()
 		reportPreciseLineForUnusedFunctionParameter: bool()
 		checkPrintfParameterTypes: bool()
+		checkUnserializeFunction: bool()
 		internalTag: bool()
 		newStaticInAbstractClassStaticMethod: bool()
 		checkExtensionsForComparisonOperators: bool()

src/Rules/Functions/UnserializeRule.php

@@ -6,8 +6,6 @@
 use PhpParser\Node\Expr\FuncCall;
 use PHPStan\Analyser\ArgumentsNormalizer;
 use PHPStan\Analyser\Scope;
-use PHPStan\DependencyInjection\AutowiredParameter;
-use PHPStan\DependencyInjection\RegisteredRule;
 use PHPStan\Php\PhpVersion;
 use PHPStan\Reflection\ParametersAcceptorSelector;
 use PHPStan\Reflection\ReflectionProvider;
@@ -20,14 +18,12 @@
 /**
  * @implements Rule<Node\Expr\FuncCall>
  */
-#[RegisteredRule(level: 5)]
 final class UnserializeRule implements Rule
 {
 
 	public function __construct(
 		private readonly PhpVersion $phpVersion,
 		private readonly ReflectionProvider $reflectionProvider,
-		#[AutowiredParameter]
 		private readonly bool $checkInsecureUnserialize,
 	)
 	{