[Security] Fix retrieval of encoder when configured for concrete classes
This commit is contained in:
parent
024cb91c5b
commit
0be11f4d9d
@ -33,7 +33,7 @@ class EncoderFactory implements EncoderFactoryInterface
|
|||||||
public function getEncoder($user)
|
public function getEncoder($user)
|
||||||
{
|
{
|
||||||
foreach ($this->encoders as $class => $encoder) {
|
foreach ($this->encoders as $class => $encoder) {
|
||||||
if ((is_object($user) && !$user instanceof $class) || (!is_subclass_of($user, $class) && $user != $class)) {
|
if ((is_object($user) && !$user instanceof $class) || (!is_object($user) && !is_subclass_of($user, $class) && $user != $class)) {
|
||||||
continue;
|
continue;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
Reference in New Issue
Block a user