Hi! > https://bugs.php.net/bug.php?id=76774 has been open since 2018-08-21. > > That ticket proposes the following: > >> I propose that we disable the ability to have concrete types included in the >> serialized metadata by >> providing an empty classlist to the unserialize call in the PHAR package. >> This will support the real cases we see in the wild of metadata usage which >> is only array key values.
I think it's a good idea. I am a little bit worried that somebody somewhere may be using phars with object data, and it'd be nice to create some way for such people to still use these phars, but by default I think no complex objects is a good idea. -- Stas Malyshev smalys...@gmail.com -- PHP Internals - PHP Runtime Development Mailing List To unsubscribe, visit: https://www.php.net/unsub.php
