[Serializer] Added check of constuctor modifiers to AbstractNormalizer

symfony · Mar 28, 2019 · 984f19a · 984f19a
1 parent fdb0490
commit 984f19a
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/src/Symfony/Component/Serializer/Normalizer/AbstractNormalizer.php b/src/Symfony/Component/Serializer/Normalizer/AbstractNormalizer.php
@@ -388,6 +388,10 @@ protected function instantiateObject(array &$data, $class, array &$context, \Ref
 
         $constructor = $this->getConstructor($data, $class, $context, $reflectionClass, $allowedAttributes);
         if ($constructor) {
+            if (true !== $constructor->isPublic()) {
+                return $reflectionClass->newInstanceWithoutConstructor();
+            }
+
             $constructorParameters = $constructor->getParameters();
 
             $params = [];