[skip ci] Update NEWS/UPGRADING for allowed_classes option checks

This commit is contained in:
Gina Peter Bnayard 2024-08-20 16:28:01 +02:00
parent 3059adae06
commit 588029a989
2 changed files with 7 additions and 0 deletions

5
NEWS
View file

@ -17,6 +17,11 @@ PHP NEWS
. Fixed bug GH-15432 (Heap corruption when querying a vector). (cmb, . Fixed bug GH-15432 (Heap corruption when querying a vector). (cmb,
Kamil Tekiela) Kamil Tekiela)
- Standard:
. The "allowed_classes" option for unserialize() now throws TypeErrors and
ValueErrors if it is not an array of class names. (Girgias)
15 Aug 2024, PHP 8.4.0beta3 15 Aug 2024, PHP 8.4.0beta3
- Core: - Core:

View file

@ -202,6 +202,8 @@ PHP 8.4 UPGRADE NOTES
byte long or the empty string. This aligns the behaviour to be identical byte long or the empty string. This aligns the behaviour to be identical
to that of fputcsv() and fgetcsv(). to that of fputcsv() and fgetcsv().
. php_uname() now throws ValueErrors on invalid inputs. . php_uname() now throws ValueErrors on invalid inputs.
. The "allowed_classes" option for unserialize() now throws TypeErrors and
ValueErrors if it is not an array of class names.
- Tidy: - Tidy:
. Failures in the constructor now throw exceptions rather than emitting . Failures in the constructor now throw exceptions rather than emitting