MAGETWO-51390: Private Data of Registered Customer May Be Retrieved with Quote Web API by Anonymous

irenelagno · isitnikov · commit 2f7b62180bc5 · 2016-04-21T11:24:44.000+03:00
diff --git a/app/code/Magento/Quote/Model/QuoteManagement.php b/app/code/Magento/Quote/Model/QuoteManagement.php
@@ -563,6 +563,7 @@ protected function _prepareCustomerQuote($quote)
 
     /**
      * @return QuoteIdMaskFactory
+     * @deprecated
      */
     private function getQuoteIdMaskFactory()
     {
diff --git a/app/code/Magento/Quote/Test/Unit/Model/QuoteManagementTest.php b/app/code/Magento/Quote/Test/Unit/Model/QuoteManagementTest.php
@@ -126,11 +126,6 @@ class QuoteManagementTest extends \PHPUnit_Framework_TestCase
      */
     protected $quoteFactoryMock;
 
-    /**
-     * @var \PHPUnit_Framework_MockObject_MockObject
-     */
-    private $quoteIdFactoryMock;
-
     /**
      * @var \PHPUnit_Framework_MockObject_MockObject
      */

Original file line number	Diff line number	Diff line change
`@@ -563,6 +563,7 @@ protected function _prepareCustomerQuote($quote)`
`563`	`563`
`564`	`564`	`/**`
`565`	`565`	`* @return QuoteIdMaskFactory`
	`566`	`+ * @deprecated`
`566`	`567`	`*/`
`567`	`568`	`private function getQuoteIdMaskFactory()`
`568`	`569`	`{`