[SECURITY] Mitigate phar stream wrapper