Re: RFC [Discussion]: Make unserialize() emit a warning for trailing bytes
| From: | Michał Marcin Brzuchalski | Date: | Mon, 27 Mar 2023 18:20:58 +0000 |
| Subject: | Re: RFC [Discussion]: Make unserialize() emit a warning for trailing bytes | ||
| References: | 1 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-119746@lists.php.net to get a copy of this message | ||
Hi Tim,
thanks for the RFC
pon., 27 mar 2023 o 19:04 Tim Düsterhus <tim@bastelstu.be> napisał(a):
> Hi
>
> I'm now opening discussion for the RFC "Make unserialize() emit a
> warning for trailing bytes":
>
> ----
>
> RFC: Make unserialize() emit a warning for trailing bytes
> https://wiki.php.net/rfc/unserialize_warn_on_trailing_data
>
> Proof of concept implementation is in:
>
> https://github.com/php/php-src/pull/9630
>
> ----
>
> Best regards
> Tim Düsterhus
>
> --
> PHP Internals - PHP Runtime Development Mailing List
> To unsubscribe, visit: https://www.php.net/unsub.php
>
>
Personally, I'd like the unserialize to throw an exception if trailing
bytes are detected.
If not by default then with the use of the option passed to unserialize
function.
Cheers,
Michał Marcin Brzuchalski