averello/nextcloud-server-mirror
1
0
Fork 0
mirror of https://github.com/nextcloud/server.git synced 2026-02-27 18:37:17 +01:00
Code Issues Packages Projects Releases Wiki Activity

Explicitely only accept closures from our dependencies in ClosureJob

Browse Source 
Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
This commit is contained in:
Côme Chilliet
2022-06-21 11:33:46 +02:00
parent 3e94faef06
commit d8c419c304
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
lib/private/Command/ClosureJob.php
View File

@@ -23,10 +23,13 @@
namespace OC\Command;
use OC\BackgroundJob\QueuedJob;
use Laravel\SerializableClosure\SerializableClosure as LaravelClosure;
use Opis\Closure\SerializableClosure as OpisClosure;
class ClosureJob extends QueuedJob {
protected function run($serializedCallable) {
$callable = unserialize($serializedCallable)->getClosure();
$callable = unserialize($serializedCallable, [LaravelClosure::class, OpisClosure::class]);
$callable = $callable->getClosure();
if (is_callable($callable)) {
$callable();
} else {