added allowed_classes=false param to unserialize function and changed…

… interop container to psr container
melisplatform · Sep 26, 2022 · 89ae612 · 89ae612
1 parent 533764f
commit 89ae612
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 4 deletions.
diff --git a/src/Controller/MelisPluginRendererController.php b/src/Controller/MelisPluginRendererController.php
@@ -32,7 +32,7 @@ public function getPluginAction()
             $pluginHardcodedConfig = $post['pluginHardcodedConfig'];
             $pluginHardcodedConfig = html_entity_decode($pluginHardcodedConfig, ENT_QUOTES);
             $pluginHardcodedConfig = html_entity_decode($pluginHardcodedConfig, ENT_QUOTES);
-            $pluginHardcodedConfig = unserialize($pluginHardcodedConfig);
+            $pluginHardcodedConfig = unserialize($pluginHardcodedConfig, ['allowed_classes' => false]);
         }
 
         $translator = $this->getServiceManager()->get('translator');

diff --git a/src/Navigation/MelisFrontNavigation.php b/src/Navigation/MelisFrontNavigation.php
@@ -10,7 +10,7 @@
 namespace MelisFront\Navigation;
 
 use Laminas\Navigation\Service\DefaultNavigationFactory;
-use Interop\Container\ContainerInterface;
+use Psr\Container\ContainerInterface;
 use Laminas\ServiceManager\ServiceManager;
 use Laminas\EventManager\EventManager;
 use Laminas\EventManager\EventManagerInterface;

diff --git a/src/Service/MelisSiteConfigService.php b/src/Service/MelisSiteConfigService.php
@@ -248,7 +248,7 @@ public function getSiteConfig($siteId, $returnAll = false)
                                     $siteConfig,
                                     [
                                         'site' => [
-                                            $siteName => unserialize($dbConf['sconf_datas'])
+                                            $siteName => unserialize($dbConf['sconf_datas'], ['allowed_classes' => false])
                                         ],
                                     ],
                                     true
@@ -259,7 +259,7 @@ public function getSiteConfig($siteId, $returnAll = false)
                                     [
                                         'site' => [
                                             $siteName => [
-                                                $siteId => unserialize($dbConf['sconf_datas'])
+                                                $siteId => unserialize($dbConf['sconf_datas'], ['allowed_classes' => false])
                                             ],
                                         ]
                                     ],