public-mirrors
/
composer
mirror of https://github.com/composer/composer
1
0
Fork 0
Code

Disable files autoloading for scripts to avoid untrusted code execution at runtime (#10373)

pull/10374/head
Jordi Boggiano 2021-12-20 14:27:34 +01:00 committed by GitHub
parent 8f1b3d21db
commit 71ab70d847
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 0 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/Composer/EventDispatcher/EventDispatcher.php
View File

@ -509,10 +509,6 @@ class EventDispatcher
$this->loader = $generator->createLoader($map, $this->composer->getConfig()->get('vendor-dir')); $this->loader = $generator->createLoader($map, $this->composer->getConfig()->get('vendor-dir'));
$this->loader->register(false); $this->loader->register(false);
foreach ($map['files'] as $fileIdentifier => $file) {
\Composer\Autoload\composerRequire($fileIdentifier, $file);
}
return $scripts[$event->getName()]; return $scripts[$event->getName()];
} }