Disable files autoloading for scripts to avoid untrusted code execution at runtime (#10373)

2021-12-20 14:27:34 +01:00 · 2021-12-20 14:27:34 +01:00 · 71ab70d847
parent 8f1b3d21db
commit 71ab70d847
1 changed files with 0 additions and 4 deletions
--- a/src/Composer/EventDispatcher/EventDispatcher.php
+++ b/src/Composer/EventDispatcher/EventDispatcher.php
@ -509,10 +509,6 @@ class EventDispatcher
        $this->loader = $generator->createLoader($map, $this->composer->getConfig()->get('vendor-dir'));
        $this->loader->register(false);

-        foreach ($map['files'] as $fileIdentifier => $file) {
-            \Composer\Autoload\composerRequire($fileIdentifier, $file);
-        }
-
        return $scripts[$event->getName()];
    }