ZF-11715: Zend_Form_Element uses create_function() where a real function would suffice.


I consider this a bug and critical, because create_function() is just another name for eval().

Zend_Form_Element::loadDefaultDecorators() uses create_function() as of trunk and 2.0, its not in 1.9. Please remove it.


Fixed in r24427 in trunk and r24428 in the 1.11 release branch, and d2db390 on ZF2 master.