Parameters

string $path:

Return value

bool

1 call to PharMetaDataInterceptor::baseFileDoesNotHaveMetaDataIssues()

PharMetaDataInterceptor::assert in misc/typo3/phar-stream-wrapper/src/Interceptor/PharMetaDataInterceptor.php

Determines whether the according Phar archive contains (potential insecure) serialized objects.

File

misc/typo3/phar-stream-wrapper/src/Interceptor/PharMetaDataInterceptor.php, line 53

Class

PharMetaDataInterceptor

@internal Experimental implementation of checking against serialized objects in Phar meta-data @internal This functionality has not been 100% pentested...

Namespace

TYPO3\PharStreamWrapper\Interceptor

Code

private function baseFileDoesNotHaveMetaDataIssues($path) {
  $invocation = Manager::instance()->resolve($path);
  if ($invocation === null) {
    return false;
  }
  // directly return in case invocation was checked before
  if ($invocation->getVariable(__CLASS__) === true) {
    return true;
  }
  // otherwise analyze meta-data
  try {
    $reader = new Reader($invocation->getBaseName());
    $reader->resolveContainer()
      ->getManifest()
      ->deserializeMetaData();
    $invocation->setVariable(__CLASS__, true);
  } catch (DeserializationException $exception) {
    return false;
  }
  return true;
}

---