diff --git a/guides/v2.2/extension-dev-guide/framework/serializer.md b/guides/v2.2/extension-dev-guide/framework/serializer.md index eb729fe30f0..15e6b227b3b 100644 --- a/guides/v2.2/extension-dev-guide/framework/serializer.md +++ b/guides/v2.2/extension-dev-guide/framework/serializer.md @@ -21,7 +21,7 @@ The main purpose of data serialization is to convert data into a string using `s The other half of this process uses the `unserialize()` function to reverse the process and convert a serialized string back into string, integer, float, boolean, or array data. -
+
For security reasons, `SerializerInterface` implementations, such as the Json and Serialize classes, should not serialize and unserialize objects.