Fix the 'supports' method argument type of the security voter

francoispluchino · francoispluchino · commit a3afd8770a81 · 2020-06-17T17:50:01.000+02:00
diff --git a/src/Symfony/Component/Security/Core/Authorization/Voter/Voter.php b/src/Symfony/Component/Security/Core/Authorization/Voter/Voter.php
@@ -30,7 +30,7 @@ public function vote(TokenInterface $token, $subject, array $attributes)
         $vote = self::ACCESS_ABSTAIN;
 
         foreach ($attributes as $attribute) {
-            if (!$this->supports($attribute, $subject)) {
+            if (!\is_string($attribute) || !$this->supports($attribute, $subject)) {
                 continue;
             }
 

Original file line number	Diff line number	Diff line change
`@@ -30,7 +30,7 @@ public function vote(TokenInterface $token, $subject, array $attributes)`
`30`	`30`	`$vote = self::ACCESS_ABSTAIN;`
`31`	`31`
`32`	`32`	`foreach ($attributes as $attribute) {`
`33`		`- if (!$this->supports($attribute, $subject)) {`
	`33`	`+ if (!\is_string($attribute) \|\| !$this->supports($attribute, $subject)) {`
`34`	`34`	`continue;`
`35`	`35`	`}`
`36`	`36`