remove call_user_func() method usage

2amigos / yii2-editable-widget

X-Editable Widget for Yii2

Other

58 stars 20 forks source link

Open albertborsos opened 2 years ago

albertborsos commented 2 years ago

to prevent function injections, because the callable value is provided by user

relates to #40

albertborsos commented 2 years ago

@tonydspaniard FYI it is a critical issue.