search

schmittjoh / JMSDiExtraBundle

Provides Advanced Dependency Injection Features for Symfony2
http://jmsyst.com/bundles/JMSDiExtraBundle
330 stars 130 forks source link

using function_exists doesn't cover case where function is disabled (PatternFinder class) #83

Open deresh opened 11 years ago

deresh commented 11 years ago

In method determineMethod in PatternFinder class function_exists is used to determine if you are allowed to use exec function. This is ok, but doesn't cover case where exec is disabled.

There should be additional checkings for that case, because if exec is disabled ( for example security reasons) everything fails - in my case whole symfony2 application :(

deresh commented 11 years ago

In my case function exec() is disabled with Suhosin directive:

suhosin.executor.func.blacklist