From f85a4a2f5135d813a14c8042ff7bcf1261de11fc Mon Sep 17 00:00:00 2001 From: Jordi Boggiano Date: Mon, 6 Mar 2017 16:17:49 +0100 Subject: [PATCH] Add notice about not trying to allow path symlinks into source dir, refs #5974, refs #6174 --- src/Composer/Downloader/PathDownloader.php | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/Composer/Downloader/PathDownloader.php b/src/Composer/Downloader/PathDownloader.php index cde32f4a62fd..79b687985ade 100644 --- a/src/Composer/Downloader/PathDownloader.php +++ b/src/Composer/Downloader/PathDownloader.php @@ -46,6 +46,10 @@ public function download(PackageInterface $package, $path, $output = true) } if (strpos(realpath($path) . DIRECTORY_SEPARATOR, $realUrl . DIRECTORY_SEPARATOR) === 0) { + // IMPORTANT NOTICE: If you wish to change this, don't. You are wasting your time and ours. + // + // Please see https://github.com/composer/composer/pull/5974 and https://github.com/composer/composer/pull/6174 + // for previous attempts that were shut down because they did not work well enough or introduced too many risks. throw new \RuntimeException(sprintf( 'Package %s cannot install to "%s" inside its source at "%s"', $package->getName(), realpath($path), $realUrl