[Serializer] Added check of constuctor modifiers to AbstractNormalizer

symfony · Mar 30, 2019 · eb0e14c · eb0e14c
1 parent 2b73460
commit eb0e14c
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/src/Symfony/Component/Serializer/Normalizer/AbstractNormalizer.php b/src/Symfony/Component/Serializer/Normalizer/AbstractNormalizer.php
@@ -333,6 +333,10 @@ protected function instantiateObject(array &$data, $class, array &$context, \Ref
 
         $constructor = $this->getConstructor($data, $class, $context, $reflectionClass, $allowedAttributes);
         if ($constructor) {
+            if (true !== $constructor->isPublic()) {
+                return $reflectionClass->newInstanceWithoutConstructor();
+            }
+
             $constructorParameters = $constructor->getParameters();
 
             $params = [];