Add Psalm taint annotations for session/cookie security

src/Annotation/Cookie.php

@@ -7,7 +7,8 @@
 use Attribute;
 use Ray\Di\Di\Qualifier;
 
-#[Attribute, Qualifier]
+#[Attribute]
+#[Qualifier]
 final class Cookie
 {
 }

src/Annotation/DeleteCookie.php

@@ -7,7 +7,8 @@
 use Attribute;
 use Ray\Di\Di\Qualifier;
 
-#[Attribute, Qualifier]
+#[Attribute]
+#[Qualifier]
 final class DeleteCookie
 {
 }

src/AuraSessionInject.php

@@ -6,15 +6,13 @@
 
 use Aura\Session\Session;
 
-/**
- * @deprecated Use PHP 8.0: Class constructor property promotion instead
- */
+/** @deprecated Use PHP 8.0: Class constructor property promotion instead */
 trait AuraSessionInject
 {
     /** @var Session */
     protected $session;
 
-    public function setSession(Session $session)
+    public function setSession(Session $session): void
     {
         $this->session = $session;
     }

src/AuraSessionModule.php

@@ -22,7 +22,7 @@
 class AuraSessionModule extends AbstractModule
 {
     /**
-     * {@inheritdoc}
+     * {@inheritDoc}
      */
     protected function configure()
     {

src/CookieProvider.php

@@ -13,9 +13,10 @@
 class CookieProvider implements ProviderInterface
 {
     /**
-     * {@inheritdoc}
+     * {@inheritDoc}
      *
      * @SuppressWarnings(PHPMD.Superglobals)
+     * @psalm-taint-source input
      */
     public function get()
     {

src/DeleteCookieInvoker.php

@@ -25,7 +25,7 @@ public function __invoke(string $name, array $params): void
             '',
             time() - 42000,
             $params['path'],
-            $params['domain']
+            $params['domain'],
         );
     }
 }

src/SessionProvider.php

@@ -1,26 +1,27 @@
 <?php
+
+declare(strict_types=1);
+
 /**
  * This file is part of the Ray.AuraSessionModule package.
- *
- * @license http://opensource.org/licenses/MIT MIT
  */
+
 namespace Ray\AuraSessionModule;
 
 use Aura\Session\SessionFactory;
 use Ray\Di\ProviderInterface;
 
-/**
- * @deprecated
- */
+/** @deprecated */
 class SessionProvider implements ProviderInterface
 {
     /**
-     * {@inheritdoc}
+     * {@inheritDoc}
      *
      * @SuppressWarnings(PHPMD.Superglobals)
+     * @psalm-taint-source input
      */
     public function get()
     {
-        return (new SessionFactory)->newInstance($_COOKIE);
+        return (new SessionFactory())->newInstance($_COOKIE);
     }
 }