From 61e49d9e0b5f7e5323353f254d4ff12905bbe573 Mon Sep 17 00:00:00 2001
From: Luke Towers <github@luketowers.ca>
Date: Fri, 13 Nov 2020 03:50:39 -0600
Subject: [PATCH] Improve Twig security policy

Follow up to 106daa2...7cb148c. Thanks to @ka1n4t for the additional review.
---
 modules/system/twig/SecurityPolicy.php | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/modules/system/twig/SecurityPolicy.php b/modules/system/twig/SecurityPolicy.php
index bcbc7a150..aacd39ba6 100644
--- a/modules/system/twig/SecurityPolicy.php
+++ b/modules/system/twig/SecurityPolicy.php
@@ -20,6 +20,8 @@ final class SecurityPolicy implements SecurityPolicyInterface
     protected $blockedMethods = [
         'addDynamicMethod',
         'addDynamicProperty',
+        'bindEvent',
+        'bindEventOnce',
     ];
 
     /**