variables that were not intended to be mutable through a web request. As a result, the
extract() might modify the variables after input validation has occurred, leading to
resultant XSS, SQL injection, file inclusion, or other issues, depending on how the
variable is being used.