summaryrefslogtreecommitdiffstatshomepage
path: root/core/modules/migrate_drupal
diff options
context:
space:
mode:
Diffstat (limited to 'core/modules/migrate_drupal')
-rw-r--r--core/modules/migrate_drupal/src/Plugin/migrate/source/DrupalSqlBase.php2
-rw-r--r--core/modules/migrate_drupal/src/Plugin/migrate/source/Variable.php5
-rw-r--r--core/modules/migrate_drupal/src/Plugin/migrate/source/VariableMultiRow.php2
-rw-r--r--core/modules/migrate_drupal/src/Plugin/migrate/source/d6/VariableTranslation.php2
-rw-r--r--core/modules/migrate_drupal/src/Plugin/migrate/source/d7/VariableTranslation.php2
-rw-r--r--core/modules/migrate_drupal/src/Plugin/migrate/source/d8/Config.php3
6 files changed, 10 insertions, 6 deletions
diff --git a/core/modules/migrate_drupal/src/Plugin/migrate/source/DrupalSqlBase.php b/core/modules/migrate_drupal/src/Plugin/migrate/source/DrupalSqlBase.php
index 64ac2031a3f..06d9bbccc97 100644
--- a/core/modules/migrate_drupal/src/Plugin/migrate/source/DrupalSqlBase.php
+++ b/core/modules/migrate_drupal/src/Plugin/migrate/source/DrupalSqlBase.php
@@ -173,7 +173,7 @@ abstract class DrupalSqlBase extends SqlBase implements DependentPluginInterface
catch (\Exception) {
$result = FALSE;
}
- return $result !== FALSE ? unserialize($result) : $default;
+ return $result !== FALSE ? unserialize($result, ['allowed_classes' => ['stdClass']]) : $default;
}
/**
diff --git a/core/modules/migrate_drupal/src/Plugin/migrate/source/Variable.php b/core/modules/migrate_drupal/src/Plugin/migrate/source/Variable.php
index 0b83a099afb..f99cd69e898 100644
--- a/core/modules/migrate_drupal/src/Plugin/migrate/source/Variable.php
+++ b/core/modules/migrate_drupal/src/Plugin/migrate/source/Variable.php
@@ -129,7 +129,10 @@ class Variable extends DrupalSqlBase {
// Create an ID field so we can record migration in the map table.
// Arbitrarily, use the first variable name.
$values['id'] = reset($this->variables);
- return $values + array_map('unserialize', $this->prepareQuery()->execute()->fetchAllKeyed());
+ return $values + array_map(
+ fn($data) => unserialize($data, ['allowed_classes' => FALSE]),
+ $this->prepareQuery()->execute()->fetchAllKeyed(),
+ );
}
/**
diff --git a/core/modules/migrate_drupal/src/Plugin/migrate/source/VariableMultiRow.php b/core/modules/migrate_drupal/src/Plugin/migrate/source/VariableMultiRow.php
index ee9b6268ebb..e2bcbddc8d3 100644
--- a/core/modules/migrate_drupal/src/Plugin/migrate/source/VariableMultiRow.php
+++ b/core/modules/migrate_drupal/src/Plugin/migrate/source/VariableMultiRow.php
@@ -66,7 +66,7 @@ class VariableMultiRow extends DrupalSqlBase {
*/
public function prepareRow(Row $row) {
if ($value = $row->getSourceProperty('value')) {
- $row->setSourceProperty('value', unserialize($value));
+ $row->setSourceProperty('value', unserialize($value, ['allowed_classes' => FALSE]));
}
return parent::prepareRow($row);
}
diff --git a/core/modules/migrate_drupal/src/Plugin/migrate/source/d6/VariableTranslation.php b/core/modules/migrate_drupal/src/Plugin/migrate/source/d6/VariableTranslation.php
index 11323f4bf7a..f9e6ef61d75 100644
--- a/core/modules/migrate_drupal/src/Plugin/migrate/source/d6/VariableTranslation.php
+++ b/core/modules/migrate_drupal/src/Plugin/migrate/source/d6/VariableTranslation.php
@@ -78,7 +78,7 @@ class VariableTranslation extends DrupalSqlBase {
foreach ($result as $i18n_variable) {
foreach ($values as $key => $value) {
if ($values[$key]['language'] === $i18n_variable->language) {
- $values[$key][$i18n_variable->name] = unserialize($i18n_variable->value);
+ $values[$key][$i18n_variable->name] = unserialize($i18n_variable->value, ['allowed_classes' => FALSE]);
break;
}
}
diff --git a/core/modules/migrate_drupal/src/Plugin/migrate/source/d7/VariableTranslation.php b/core/modules/migrate_drupal/src/Plugin/migrate/source/d7/VariableTranslation.php
index 56121db822a..82d638fa3d8 100644
--- a/core/modules/migrate_drupal/src/Plugin/migrate/source/d7/VariableTranslation.php
+++ b/core/modules/migrate_drupal/src/Plugin/migrate/source/d7/VariableTranslation.php
@@ -78,7 +78,7 @@ class VariableTranslation extends DrupalSqlBase {
foreach ($values as $key => $value) {
if ($values[$key]['language'] === $variable_store['realm_key']) {
if ($variable_store['serialized']) {
- $values[$key][$variable_store['name']] = unserialize($variable_store['value']);
+ $values[$key][$variable_store['name']] = unserialize($variable_store['value'], ['allowed_classes' => FALSE]);
break;
}
else {
diff --git a/core/modules/migrate_drupal/src/Plugin/migrate/source/d8/Config.php b/core/modules/migrate_drupal/src/Plugin/migrate/source/d8/Config.php
index b1d409f4017..1bb5b4f51bf 100644
--- a/core/modules/migrate_drupal/src/Plugin/migrate/source/d8/Config.php
+++ b/core/modules/migrate_drupal/src/Plugin/migrate/source/d8/Config.php
@@ -88,7 +88,8 @@ class Config extends DrupalSqlBase {
* {@inheritdoc}
*/
public function prepareRow(Row $row) {
- $row->setSourceProperty('data', unserialize($row->getSourceProperty('data')));
+ // @see \Drupal\Core\Config\DatabaseStorage::decode()
+ $row->setSourceProperty('data', unserialize($row->getSourceProperty('data'), ['allowed_classes' => FALSE]));
return parent::prepareRow($row);
}