From e45eb23ba2a74036bfd6f14bbd9b371a0a430fc3 Mon Sep 17 00:00:00 2001 From: Jordi Boggiano Date: Thu, 18 Mar 2021 08:44:57 +0100 Subject: [PATCH] [Validator] Avoid triggering the autoloader for user-input values --- .../Validator/Validator/RecursiveContextualValidator.php | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/src/Symfony/Component/Validator/Validator/RecursiveContextualValidator.php b/src/Symfony/Component/Validator/Validator/RecursiveContextualValidator.php index 9e743f44a7..c816317fb5 100644 --- a/src/Symfony/Component/Validator/Validator/RecursiveContextualValidator.php +++ b/src/Symfony/Component/Validator/Validator/RecursiveContextualValidator.php @@ -656,8 +656,10 @@ class RecursiveContextualValidator implements ContextualValidatorInterface return; } - // If the value is a scalar, pass it anyway, because we want - // a NoSuchMetadataException to be thrown in that case + if (!\is_object($value)) { + throw new NoSuchMetadataException(sprintf('Cannot create metadata for non-objects. Got: "%s".', \gettype($value))); + } + $this->validateObject( $value, $propertyPath,