diff options
| author | Stanislav Malyshev <stas@php.net> | 2020-09-28 21:39:20 -0700 |
|---|---|---|
| committer | Stanislav Malyshev <stas@php.net> | 2020-09-28 21:39:20 -0700 |
| commit | 626705fb9de6211ee912b737e7a00bfe63fdea63 (patch) | |
| tree | 84977e2efc8a75c5e83e736d41fb755915ce6def | |
| parent | f1d8395c773854c5d8a2a39241750e636e95d92c (diff) | |
| download | php-git-626705fb9de6211ee912b737e7a00bfe63fdea63.tar.gz | |
Update UPGRADING
| -rw-r--r-- | UPGRADING | 5 |
1 files changed, 5 insertions, 0 deletions
@@ -125,6 +125,11 @@ DOM: After: ReflectionMethod::getClosure($object = null) The new signature is also (LSP) compatible with older PHP versions. +- SAPI: + . Starting with 7.4.12, incoming cookie names are not url-decoded. This was never + required by the standard, outgoing cookie names aren't encoded and this leads + to security issues (CVE-2020-7070). + - SPL: . Calling get_object_vars() on an ArrayObject instance will now always return the properties of the ArrayObject itself (or a subclass). Previously it |