function TwigSandboxPolicy::__construct

Constructs a new TwigSandboxPolicy object.

File

core/lib/Drupal/Core/Template/TwigSandboxPolicy.php, line 49

Class

TwigSandboxPolicy

Default sandbox policy for Twig templates.

Namespace

Code

public function __construct() {
  // Allow settings.php to override our default allowed classes, methods, and
  // prefixes.
  $allowed_classes = Settings::get('twig_sandbox_allowed_classes', [
    // Allow any operations on the Attribute object as it is intended to be
    // changed from a Twig template, for example calling addClass().
'Drupal\\Core\\Template\\Attribute',
  ]);
  // Flip the array so we can check using isset().
  $this->allowed_classes = array_flip($allowed_classes);
  $allowed_methods = static::getMethodsAllowedOnAllObjects();
  // Flip the array so we can check using isset().
  $this->allowed_methods = array_flip($allowed_methods);
  $this->allowed_prefixes = Settings::get('twig_sandbox_allowed_prefixes', [
    'get',
    'has',
    'is',
  ]);
}