‪TYPO3CMS  ‪main
TYPO3\CMS\Core\Security\BlockSerializationTrait Class Reference
Inheritance diagram for TYPO3\CMS\Core\Security\BlockSerializationTrait:
TYPO3\CMS\Core\FormProtection\AbstractFormProtection TYPO3\CMS\Extensionmanager\Controller\UploadExtensionFileController TYPO3\CMS\Core\FormProtection\BackendFormProtection TYPO3\CMS\Core\FormProtection\DisabledFormProtection TYPO3\CMS\Core\FormProtection\FrontendFormProtection TYPO3\CMS\Core\FormProtection\InstallToolFormProtection TYPO3\CMS\Core\Tests\Unit\FormProtection\Fixtures\FormProtectionTesting

Public Member Functions

 __wakeup ()
 

Detailed Description

Blocks object being using unserialize() invocations.

Initially this trait blocked serialize() as well, which caused a couple of side-effects in user-land code and is not problematic from a security point of view.

Definition at line 27 of file BlockSerializationTrait.php.

Member Function Documentation

◆ __wakeup()

TYPO3\CMS\Core\Security\BlockSerializationTrait::__wakeup ( )

Deny object deserialization.

Definition at line 32 of file BlockSerializationTrait.php.