[Flow] Abstract Classes and Policy

[Christian Loock]

Hi,

we recently updated to Flow 2.2 and since then, we are getting security
exceptions, that are triggerd because the Security Framework checks Classes
you inherit from. Example:

You write a Widget that has a controller that that extends from
TYPO3\Fluid\Core\Widget\AbstractWidgetController

In Flow 2.1 this caused no issues, since it seems like it didnt check for
this kind of inheritance.

Now I know I can fix this, by adding these Controllers to my Policy, but
shouldnt it be at least part of Flows Policy.yaml ?

Does it even make sense to check for ViewHelpers? Or is this behaviour
intended?