Comment by remi_forax

No, unlike PHP, PHP.reboot is secure by default. That's why PHP.reboot use DSLs, because it enables the runtime to know the context thus sanitize the inputs by itself.

Rémi