Make FromFile(s)SchemaProvider secure

[roxblnfk]

It would be great to make the schema providers from the php file more secure. Should we include preliminary parsing of the php file before include/require to make sure there is no potentially malicious code? Or is it better to look towards more secure formats like json or yaml?