Commit d1853ba3 authored by Pravin Gaikwad's avatar Pravin Gaikwad Committed by Damien McKenna
Browse files

Issue #3313577 by Rajeshreeputra, DamienMcKenna: Add "allowed_classes" option... 

Issue #3313577 by Rajeshreeputra, DamienMcKenna: Add "allowed_classes" option to all unserialize() uses.
parent 9f188a7e

src/SchemaMetatagManager.php

+1 −1
Original line number Diff line number Diff line
@@ -220,7 +220,7 @@ public static function unserialize($value) { 
      // than the original tokens.

      $value = self::recomputeSerializedLength($value);

      // Keep broken unserialization from throwing errors on the page.

      if ($value = @unserialize($value)) {

      if ($value = @unserialize($value, ['allowed_classes' => FALSE])) {

        $value = self::arrayTrim($value);

      }

      else {

tests/src/Unit/SchemaMetatagManagerTest.php

+2 −2
Original line number Diff line number Diff line
@@ -2,8 +2,8 @@ 


namespace Drupal\Tests\schema_metatag\Unit;



use Drupal\Tests\UnitTestCase;

use Drupal\schema_metatag\SchemaMetatagManager;

use Drupal\Tests\UnitTestCase;



/**

 * @coversDefaultClass \Drupal\schema_metatag\SchemaMetatagManager
@@ -82,7 +82,7 @@ public function testRecomputeSerializedLength($tests, $original, $original_seria 
    }

    $replaced = str_replace('Organization', 'ReallyBigOrganization', $original_serialized);

    $processed = SchemaMetatagManager::recomputeSerializedLength($replaced);

    $unserialized = unserialize($processed);

    $unserialized = unserialize($processed, ['allowed_classes' => FALSE]);

    $this->assertIsArray($unserialized);

    $this->assertContains('ReallyBigOrganization', $unserialized);

  }