review: check RoleHierarchy class on reflexion when extracting roles

damienfern · damienfern · commit 834494eaa3a4 · 2025-07-16T07:57:29.000+02:00
diff --git a/src/Symfony/Component/Security/Core/Dumper/MermaidDumper.php b/src/Symfony/Component/Security/Core/Dumper/MermaidDumper.php
@@ -11,6 +11,7 @@
 
 namespace Symfony\Component\Security\Core\Dumper;
 
+use Symfony\Component\Security\Core\Role\RoleHierarchy;
 use Symfony\Component\Security\Core\Role\RoleHierarchyInterface;
 
 /**
@@ -56,7 +57,11 @@ public function dump(RoleHierarchyInterface $roleHierarchy): string
 
     private function extractHierarchy(RoleHierarchyInterface $roleHierarchy): array
     {
-        $reflection = new \ReflectionClass($roleHierarchy);
+        if (!$roleHierarchy instanceof RoleHierarchy) {
+            return [];
+        }
+
+        $reflection = new \ReflectionClass(RoleHierarchy::class);
 
         if ($reflection->hasProperty('hierarchy')) {
             $hierarchyProperty = $reflection->getProperty('hierarchy');
