Re: Including "Disable the ability to use concrete types in PHAR metadata" in PHP 8.0?

Hi! > https://bugs.php.net/bug.php?id=76774 has been open since > 2018-08-21. > > That ticket proposes the following: > >> I propose that we disable the ability to have concrete types included in the serialized >> metadata by >> providing an empty classlist to the unserialize call in the PHAR package. >> This will support the real cases we see in the wild of metadata usage which is only array >> key values. I think it's a good idea. I am a little bit worried that somebody somewhere may be using phars with object data, and it'd be nice to create some way for such people to still use these phars, but by default I think no complex objects is a good idea. -- Stas Malyshev smalyshev@gmail.com