DeserializationService
Read onlyYes
FinalYes
Low-level utilities for PHP serialization format inspection.
Only to be used by TYPO3 core
Table of Contents
Methods
- deserialize() : mixed
- parseClassNames() : array<int, class-string>
- Extracts all class names from a PHP-serialized payload, ignoring any class-name tokens that appear inside serialized string values.
Methods
deserialize()
public
deserialize(string $payload[, bool|array<int, class-string> $allowedClasses = false ]) : mixed
Parameters
- $payload : string
- $allowedClasses : bool|array<int, class-string> = false
parseClassNames()
Extracts all class names from a PHP-serialized payload, ignoring any class-name tokens that appear inside serialized string values.
public
parseClassNames(string $payload) : array<int, class-string>
Returns an empty array for payloads that contain no objects, and skips any token whose declared byte-length does not match the actual class-name length (malformed entries).
Parameters
- $payload : string