Strings with function names passed as context values are executed

[hugoFelippe]

if a function name is passed as a context value, the function is executed automatically rather than being treated as a string. This can cause unintended behavior, as the user may not intend to call the function.

This could be a bigger problem if one of the values ​​comes from a value the user passed e.g. phpinfo

Example:

if the pestphp package is installed, this issue is triggered, and the function is executed, even if the intent is to pass it as a string.

$env = 'test';

StickyContext::defaultStack('application');
StickyContext::add('system.env', $env);

How to Reproduce: The problem can be reproduced using this repository: test-monolog-sticky-context.

Suggested solution:

• Add a check to verify if the function requires parameters; if it does, prevent it from being executed automatically.
• Create an "ignore list" of functions that should never be executed within the context, treating them as strings by default.
• Consider adjusting the way parameters are passed so that function names can be clearly marked as functions and not mistakenly executed.