ALinks causes security exception after Drupal 8.8

Fixes the error for me too, on Drupal 9.2

hi, any progress on making this official? I can't implement this fix you provided - apparently it has problem with Wamania\Snowboll\English stuff?

Hey, I will try to explain further. I am using Hostinger and Auto-Installer for Drupal so everything is working on host site.

I will try to insert some code here.

So I get this message same as yours:
Drupal\Core\Security\UntrustedCallbackException: Render #post_render callbacks must be methods of a class that implements \Drupal\Core\Security\TrustedCallbackInterface or be an anonymous function. The callback was Drupal\alinks\AlinkPostRenderer::postRender. See https://www.drupal.org/node/2966725 in Drupal\Core\Render\Renderer->doTrustedCallback() (line 96 of core/lib/Drupal/Core/Security/DoTrustedCallbackTrait.php).

Okay, so I want to fix this. I go to AlinkPostRenderer.php. As you can see below there is Wamania stuff in the code.

namespace Drupal\alinks;

use Drupal\alinks\Entity\Keyword;
use Drupal\Component\Utility\Html;
use Drupal\Core\Url;
use Drupal\taxonomy\Entity\Term;
use Wamania\Snowball\English;

/**
 * Class AlinkPostRenderer.
 */
class AlinkPostRenderer {

  protected $content;

  protected $keywords;

  protected $existingLinks;

  /**
   * Stemmer.
   *
   * @var \Wamania\Snowball\Stem
   */
  protected $stemmer;

  protected $stemmerCache = [];

  protected $xpathSelector = "//text()[not(ancestor::a) and not(ancestor::script) and not(ancestor::*[@data-alink-ignore])]";

  /**
   * AlinkPostRenderer constructor.
   *
   * @param \Drupal\Core\Render\Markup $content
   *    The content of the current page.
   * @param array $context
   *    The current page context.
   * @param null $xpathSelector
   *    The selector rule for the html.
   */
  public function __construct($content, $context = NULL, $xpathSelector = NULL) {

    if (!empty($context['#entity_type']) && !empty($context['#' . $context['#entity_type']])) {
      $entity = $context['#' . $context['#entity_type']];
      $class = 'Wamania\Snowball\\' . $entity->language()->getName();
      if (class_exists($class)) {
        $this->stemmer = new $class();
      }
      else {
        $this->stemmer = new English();
      }
    }

    $this->content = $content;
    if ($xpathSelector) {
      $this->xpathSelector = $xpathSelector;
    }
  }

As I implemented your solution I get error like this:
The website encountered an unexpected error. Please try again later.
Error: Class 'Wamania\Snowball\English' not found in Drupal\alinks\AlinkPostRenderer->__construct() (line 53 of modules/alinks/src/AlinkPostRenderer.php).

Also in your solution posted 2 years ago there is use case of Wamania.

Thank you, I will try your solutions out :)

I ran into this error message again just now on a D9.4.2 + Alinks 2.0.0 dev install.

Patch from #2 seems to have cured the error.

Any ETA for a release containing this patch?

Thanks

After applying the Patch from #2, this error is gone, but a new error appeared for D9.5.10 with latest dev version of Alinks:

TypeError: Drupal\alinks\AlinkPostRenderer::__construct(): Argument #1 ($entity_type_manager) must be of type Drupal\Core\Entity\EntityTypeManagerInterface, Drupal\Core\Render\Markup given, called in /modules/alinks/src/AlinkPostRenderer.php on line 289 in Drupal\alinks\AlinkPostRenderer->__construct() (line 79 of /modules/alinks/src/AlinkPostRenderer.php)

Any ideas?

#12 - same

I hope the changes to the metadata are OK. :-)

same as #12 on Drupal 10.1.6

upgrade bug severity to critical since website becomes inaccessible with this error.

okay, so I fixed the security error by changing AlinkPostRenderer.php a little:

TrustedCallbackInterface

...
use Drupal\Core\Security\TrustedCallbackInterface;
...
class AlinkPostRenderer implements TrustedCallbackInterface {

  public static function trustedCallbacks() {
      return ['postRender'];
  }

the security error goes away.

but I now get the error:
Uncaught PHP Exception TypeError: "Drupal\alinks\AlinkPostRenderer::__construct(): Argument #1 ($entity_type_manager) must be of type Drupal\Core\Entity\EntityTypeManagerInterface, Drupal\Core\Render\Markup given, called in C:\wamp64\www\website\web\modules\contrib\alinks\src\AlinkPostRenderer.php on line 294" at C:\wamp64\www\website\web\modules\contrib\alinks\src\AlinkPostRenderer.php

what seems to be the problem ?

resolved in the current dev release
https://www.drupal.org/project/alinks/issues/3412674