Re: [VOTE] Don't automatically unserialize Phar metadata outside getMetadata()
| From: | tyson andre | Date: | Tue, 04 Aug 2020 13:46:22 +0000 |
| Subject: | Re: [VOTE] Don't automatically unserialize Phar metadata outside getMetadata() | ||
| References: | 1 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-111313@lists.php.net to get a copy of this message | ||
Hi internals,
> I've started the vote
> on https://wiki.php.net/rfc/phar_stop_autoloading_metadata
> as announced earlier in https://externals.io/message/110871
> ([RFC] Don't automatically unserialize Phar metadata outside getMetadata())
>
> This adds the mitigations described in
> https://externals.io/message/105271#105291 ,
> which seemed to be the most straightforward approach to avoiding unexpected side effects of
> unserialization.
The vote has passed with 25 yes votes and 0 no votes.
Thanks,
- Tyson