SmartNull: compare method names case-insensitively in __call

PHP ignores case on method names, but the map/apply and getIterator checks
used ===, so ->Map() delegated to SmartString and ran the callback on null
(fatal with a typed callback) where ->map() correctly propagates. All name
checks now use a strtolower copy, matching the case-insensitive delegation.
Also fixes security scan F6 (same finding). Mixed-case test added.

Author: daveedis

src/SmartNull.php

@@ -309,15 +309,16 @@ public function __call($name, array $arguments): mixed
         // The in_array list mirrors the deprecated shims in SmartString::__call, which
         // method_exists() can't see. Keep both sites in sync: when SmartString drops a
         // shim, drop it here too.
+        $nameLower           = strtolower($name); // PHP method dispatch ignores case, so every name check here must too
         $isSmartStringMethod = $this->useSmartStrings
-            && $name !== 'getIterator'
+            && $nameLower !== 'getiterator'
             && (
                 (method_exists(SmartString::class, $name) && (new ReflectionMethod(SmartString::class, $name))->isPublic())
-                || in_array(strtolower($name), ['noencode', 'tostring', 'jsencode', 'striptags'], true)
+                || in_array($nameLower, ['noencode', 'tostring', 'jsencode', 'striptags'], true)
             );
 
         if ($isSmartStringMethod) {
-            if ($name === 'map' || $name === 'apply') {
+            if ($nameLower === 'map' || $nameLower === 'apply') {
                 return $this;
             }
             $result = SmartString::new(null)->$name(...$arguments);

tests/Unit/SmartNullTest.php

@@ -307,6 +307,22 @@ public function testApplyAliasPropagatesLikeMapInHtmlMode(): void
         $this->assertSame('n/a', $smartNull->apply('strtoupper')->or('n/a')->value(), 'chain stays open after apply');
     }
 
+    public function testOddCasedMapAndApplyPropagateLikeLowercaseInHtmlMode(): void
+    {
+        // PHP method dispatch ignores case (->dateformat() works), so ->Map() must
+        // propagate exactly like ->map() - not delegate and run the callback on null
+        $smartNull = $this->smartNullFrom(SmartArrayHtml::class);
+        $calls     = 0;
+        $callback  = function ($value) use (&$calls) {
+            $calls++;
+            return 'computed';
+        };
+
+        $this->assertSame($smartNull, $smartNull->Map($callback));
+        $this->assertSame($smartNull, $smartNull->APPLY($callback));
+        $this->assertSame(0, $calls, 'the callback never runs on a missing key, whatever the casing');
+    }
+
     public function testDeprecatedSmartStringShimsWorkOnMissingKeysInHtmlMode(): void
     {
         // noEncode/toString/jsEncode/stripTags only exist inside SmartString's