Use func_get_arg(0) vs $template

This makes it more-obvious to casual reviewers that $template cannot be replaced by the extract() call, and thus is not a security vulnerability.

Author: Paul M. Jones

src/PhpRenderer.php

@@ -185,6 +185,6 @@ public function fetch($template, array $data = []) {
      */
     protected function protectedIncludeScope ($template, array $data) {
         extract($data);
-        include $template;
+        include func_get_arg(0);
     }
 }