| @@ -1547,10 +1547,9 @@ | ||
| 1547 | 1547 | $metadata = $entry->get_metadata(); |
| 1548 | 1548 | $payment = $entry->get_payment_data(); |
| 1549 | 1549 | |
| 1550 | 1550 | if ( isset( $payment->payment_data ) && is_serialized( $payment->payment_data ) ) { |
| 1551 | - // Security fix: Prevent PHP Object Injection by restricting allowed classes | |
| 1552 | - $payment->payment_data = @unserialize( $payment->payment_data, [ 'allowed_classes' => false ] ); | |
| 1551 | + $payment->payment_data = unserialize( $payment->payment_data ); | |
| 1553 | 1552 | } |
| 1554 | 1553 | |
| 1555 | 1554 | $has_empty = false; |
| 1556 | 1555 | $answers = []; |
