[skip ci] Update NEWS/UPGRADING for allowed_classes option checks

This commit is contained in:
Gina Peter Bnayard 2024-08-20 16:28:01 +02:00
parent 3059adae06
commit 588029a989
2 changed files with 7 additions and 0 deletions

5
NEWS
View file

@ -17,6 +17,11 @@ PHP NEWS
. Fixed bug GH-15432 (Heap corruption when querying a vector). (cmb,
Kamil Tekiela)
- Standard:
. The "allowed_classes" option for unserialize() now throws TypeErrors and
ValueErrors if it is not an array of class names. (Girgias)
15 Aug 2024, PHP 8.4.0beta3
- Core:

View file

@ -202,6 +202,8 @@ PHP 8.4 UPGRADE NOTES
byte long or the empty string. This aligns the behaviour to be identical
to that of fputcsv() and fgetcsv().
. php_uname() now throws ValueErrors on invalid inputs.
. The "allowed_classes" option for unserialize() now throws TypeErrors and
ValueErrors if it is not an array of class names.
- Tidy:
. Failures in the constructor now throw exceptions rather than emitting