search

sulu / SuluRedirectBundle

Sulu bundle for managing redirects
MIT License
18 stars 19 forks source link

Removing of the deserialization #40

Closed alexander-schranz closed 3 years ago

alexander-schranz commented 5 years ago
Q A
Bug? yes
New Feature? no
Sulu Version 1.6.27, 2.0.0-RC1
SuluRedirect Version 0.2.2, dev-develop
Browser Version -

Actual Behavior

The deserialization does skip and setter/getter and can overwrite changer, creator, ids which is a security issue how it is currently implemented.

Expected Behavior

Use the serializer just to serialize object to json but not json to object use normal setters instead.

alexander-schranz commented 3 years ago

This is not longer the case in 2.0.0