Shopware Improper Control of Generation of Code in Twig rendered views

@@ -45,6 +45,11 @@ public function map(?iterable $array, string|callable|\Closure $function): ?arra
             return null;
         }
 
+        if (\is_array($function)) {
+            $function = implode('::', $function);
+            \assert(\is_callable($function));
+        }
+
         if (\is_string($function) && !\in_array($function, $this->allowedPHPFunctions, true)) {
             throw AdapterException::securityFunctionNotAllowed($function);
         }

@@ -185,7 +185,7 @@ class SecurityExtensionGadget
 {
     public static function do(): void
     {
-        throw new \Error('This should not be called');
+        // no op, do not throw as we need to check that an exception is thrown by the security extension, not here
     }
 }