PayloadSigner.php
Pop PHP Framework (https://www.popphp.org/)
Tags
Table of Contents
Classes
- PayloadSigner
- Payload signer class - HMAC-signs/verifies the serialized bytes every storage adapter writes, closing the unserialize() object-injection gap for anyone who can write to the underlying storage directly (a compromised Redis instance, SQL injection elsewhere in the host app, a writable queue directory). Static-only, mirroring Laravel\SerializableClosure::setSecretKey()'s own static-global shape - a familiar idiom already present in this project's dependency tree.