diff --git a/src/Symfony/Component/Serializer/Normalizer/AbstractNormalizer.php b/src/Symfony/Component/Serializer/Normalizer/AbstractNormalizer.php index 3f181e4e99a55..f99c61a36bd32 100644 --- a/src/Symfony/Component/Serializer/Normalizer/AbstractNormalizer.php +++ b/src/Symfony/Component/Serializer/Normalizer/AbstractNormalizer.php @@ -333,6 +333,10 @@ protected function instantiateObject(array &$data, $class, array &$context, \Ref $constructor = $this->getConstructor($data, $class, $context, $reflectionClass, $allowedAttributes); if ($constructor) { + if (true !== $constructor->isPublic()) { + return $reflectionClass->newInstanceWithoutConstructor(); + } + $constructorParameters = $constructor->getParameters(); $params = [];
Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.
Alternative Proxies: