search

neos / form

Flow Form Framework
https://flow-form-framework.readthedocs.org/en/latest/
MIT License
15 stars 36 forks source link

Make allowed_classes configurable when unserializing formState #144

Closed ger4003 closed 3 years ago

ger4003 commented 3 years ago

With a new configuration option it is possible to add class names to allowed_classes for unserialize() formState within FormRuntime::initializeFormStateFromRequest

closes #143

bwaidelich commented 3 years ago

I'm just not sure about the target branch. IIRC features can only go into a 5.3 release!?

ger4003 commented 3 years ago

I can change the target branch to master, that is fine by me. @bwaidelich Should I?

bwaidelich commented 3 years ago

I can change the target branch to master

yes please. Thanks

bwaidelich commented 3 years ago

@ger4003 Just a little update: I'm currently reviewing this and the change works great, but we are currently discussing whether the allowed_classes option could be skipped altogether. I will keep you updated

ger4003 commented 3 years ago

close in favor of #145