Disable files autoloading for scripts to avoid untrusted code execution at runtime (#10373)

main
Jordi Boggiano 2 years ago committed by GitHub
parent 8f1b3d21db
commit 71ab70d847
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

@ -509,10 +509,6 @@ class EventDispatcher
$this->loader = $generator->createLoader($map, $this->composer->getConfig()->get('vendor-dir'));
$this->loader->register(false);
foreach ($map['files'] as $fileIdentifier => $file) {
\Composer\Autoload\composerRequire($fileIdentifier, $file);
}
return $scripts[$event->getName()];
}

Loading…
Cancel
Save