[Serializer] Added check of constuctor modifiers to AbstractNormalizer

dmitrii-t · fabpot · commit eb0e14c298eb · 2019-03-30T08:26:35.000+01:00
diff --git a/src/Symfony/Component/Serializer/Normalizer/AbstractNormalizer.php b/src/Symfony/Component/Serializer/Normalizer/AbstractNormalizer.php
@@ -333,6 +333,10 @@ protected function instantiateObject(array &$data, $class, array &$context, \Ref
 
         $constructor = $this->getConstructor($data, $class, $context, $reflectionClass, $allowedAttributes);
         if ($constructor) {
+            if (true !== $constructor->isPublic()) {
+                return $reflectionClass->newInstanceWithoutConstructor();
+            }
+
             $constructorParameters = $constructor->getParameters();
 
             $params = [];
