2amigos / yii2-editable-widget

X-Editable Widget for Yii2
Other
58 stars 20 forks source link

remove call_user_func() method usage #41

Open albertborsos opened 2 years ago

albertborsos commented 2 years ago

to prevent function injections, because the callable value is provided by user

relates to #40

albertborsos commented 2 years ago

@tonydspaniard FYI it is a critical issue.