MDL-78647 files: safer unserializing of file reference data.

2023-08-04 12:55:23 +02:00
parent cddb24754e
commit a524ac4bb3
1 changed files with 1 additions and 1 deletions
@@ -1951,7 +1951,7 @@ class file_storage {
        if ($decoded === false) {
            throw new file_reference_exception(null, $str, null, null, 'Invalid base64 format');
        }
-        $params = @unserialize($decoded); // hide E_NOTICE
+        $params = unserialize_array($decoded);
        if ($params === false) {
            throw new file_reference_exception(null, $decoded, null, null, 'Not an unserializeable value');
        }