volse-hubzilla.git - Volse Hubzilla -- soft fork of main Hubzilla core for Volse

	Commit message (Collapse)	Author	Age	Files	Lines
*	fix code comment	Mario	2024-03-13	1	-2/+2
\|
*	fix another regression from last Lib/Config refactor which returned the ↵	Mario	2024-03-13	1	-0/+12
\| \| \| \|	default falue in case the value was an array. also add a testcase for this situation
*	Fix deserialization of config values broken by 69266cd6.	Harald Eilertsen	2023-12-17	1	-0/+61
	This should fix issue #1828. This patch makes it explicit that we store arrays in the config as json encoded arrays, while we allow both json encoded and PHP serialized arrays to be deserialized correctly. Unless it's a brand new install, the existing data in the database will be PHP serialized. I've also added a hardening measure in case we fall back to PHP unserialize, making sure we're not vulnerable to a PHP Object Injection attack. This means that deserializing arrays containing PHP objects will no longer work, but afaict we never do that anyways, so I don't think that should break anything.