com php-src: Add NEWS & UPGRADING: NEWS UPGRADING

Commit: 77f172725a37c8ddee750bf6970529a1570fbc86 Author: Stanislav Malyshev <stas@php.net> Sat, 22 Nov 2014 22:23:55 -0800 Parents: 9d7c5dbed941c4d4c18d7d5ed308a07897b7596d Branches: master Link: http://git.php.net/?p=php-src.git;a=commitdiff;h=77f172725a37c8ddee750bf6970529a1570fbc86 Log: Add NEWS & UPGRADING Changed paths: M NEWS M UPGRADING Diff: diff --git a/NEWS b/NEWS index af42147..50fe518 100644 --- a/NEWS +++ b/NEWS @@ -17,7 +17,9 @@ PHP NEWS . Implemented FR #38409 (parse_ini_file() looses the type of booleans). (Tjerk) . Fixed #67959 (Segfault when calling phpversion('spl')). (Florian) . Implemented the RFC `Catchable "Call to a member function bar() on a - non-object"` (Timm) + non-object"`. (Timm) + . Added options parameter for unserialize allowing to specify acceptable + classes (https://wiki.php.net/rfc/secure_unserialize). (Stas) .. Fixed bug #68185 ("Inconsistent insteadof definition."- incorrectly triggered). (Julien) - DBA: diff --git a/UPGRADING b/UPGRADING index 61a5125..fe28213 100644 --- a/UPGRADING +++ b/UPGRADING @@ -76,6 +76,11 @@ PHP X.Y UPGRADE NOTES - parse_ini_file(): - parse_ini_string(): Added scanner mode INI_SCANNER_TYPED to yield typed .ini values. +- unserialize(): + Added second parameter for unserialize function + (RFC: https://wiki.php.net/rfc/secure_unserialize) allowing to specify + acceptable classes: + unserialize($foo, ["allowed_classes" => ["MyClass", "MyClass2"]); ========================================