Skip to content
Permalink
Browse files

Add notice about not trying to allow path symlinks into source dir, r…

…efs #5974, refs #6174
  • Loading branch information...
Seldaek committed Mar 6, 2017
1 parent 70314f3 commit f85a4a2f5135d813a14c8042ff7bcf1261de11fc
Showing with 4 additions and 0 deletions.
  1. +4 −0 src/Composer/Downloader/PathDownloader.php
@@ -46,6 +46,10 @@ public function download(PackageInterface $package, $path, $output = true)
}
if (strpos(realpath($path) . DIRECTORY_SEPARATOR, $realUrl . DIRECTORY_SEPARATOR) === 0) {
// IMPORTANT NOTICE: If you wish to change this, don't. You are wasting your time and ours.
//
// Please see https://github.com/composer/composer/pull/5974 and https://github.com/composer/composer/pull/6174
// for previous attempts that were shut down because they did not work well enough or introduced too many risks.
throw new \RuntimeException(sprintf(
'Package %s cannot install to "%s" inside its source at "%s"',
$package->getName(), realpath($path), $realUrl

0 comments on commit f85a4a2

Please sign in to comment.
You can’t perform that action at this time.