diogo/symfony
Archived
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

[Serializer] AbstractObjectNormalizer: be sure that isAllowedAttribute is called

Browse Source
This commit is contained in:
Kévin Dunglas 2016-05-22 13:53:30 +02:00 committed by Fabien Potencier
parent 070a02ca7d
commit 29b4115d1a
1 changed files with 1 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
src/Symfony/Component/Serializer/Normalizer/AbstractObjectNormalizer.php
View File

@ -182,10 +182,7 @@ abstract class AbstractObjectNormalizer extends AbstractNormalizer
$attribute = $this->nameConverter->denormalize($attribute);
}
$allowed = $allowedAttributes === false || in_array($attribute, $allowedAttributes);
$ignored = in_array($attribute, $this->ignoredAttributes);
if (!$allowed || $ignored) {
if (($allowedAttributes !== false && !in_array($attribute, $allowedAttributes)) || !$this->isAllowedAttribute($class, $attribute, $format, $context)) {
continue;
}