Quantcast
Channel: Issues for Drupal core
Viewing all articles
Browse latest Browse all 295445

Do not register Phar stream wrapper on PHP 8 because it is not vulnerable to unserialize bugs

$
0
0

Problem/Motivation

Once we update in #3181240: Upgrade typo3/phar-stream-wrapper 3.1.6 then PHP 8 doesn't have the same vulnerability as PHP 7 so there's no need to register the phar stream wrapper.

Proposed resolution

Check PHP version before registering the wrapper.

Remaining tasks

review/commit

User interface changes

None

API changes

None

Data model changes

None

Release notes snippet

N/a


Viewing all articles
Browse latest Browse all 295445


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>