Support unallowed extra attributes

julienfalque · julienfalque · commit 2ef000346c2a · 2020-11-22T12:22:51.000+01:00
diff --git a/src/Symfony/Component/Serializer/Normalizer/AbstractObjectNormalizer.php b/src/Symfony/Component/Serializer/Normalizer/AbstractObjectNormalizer.php
@@ -23,6 +23,7 @@
 use Symfony\Component\Serializer\Exception\LogicException;
 use Symfony\Component\Serializer\Exception\NotNormalizableValueException;
 use Symfony\Component\Serializer\Exception\RuntimeException;
+use Symfony\Component\Serializer\InvariantViolation;
 use Symfony\Component\Serializer\Mapping\AttributeMetadataInterface;
 use Symfony\Component\Serializer\Mapping\ClassDiscriminatorFromClassMetadata;
 use Symfony\Component\Serializer\Mapping\ClassDiscriminatorResolverInterface;
@@ -353,11 +354,15 @@ public function denormalize($data, string $type, string $format = null, array $c
             }
         }
 
-        if ([] !== $invariantViolations) {
-            return DenormalizationResult::failure($invariantViolations);
-        }
-
         if ($context[self::COLLECT_INVARIANT_VIOLATIONS] ?? false) {
+            if (!empty($extraAttributes)) {
+                $invariantViolations[] = new InvariantViolation($data, sprintf('Extra attributes are not allowed ("%s" are unknown).', implode('", "', $extraAttributes)));
+            }
+
+            if ([] !== $invariantViolations) {
+                return DenormalizationResult::failure($invariantViolations);
+            }
+
             return DenormalizationResult::success($object);
         }
 
