Skip to content
LaravelBlog

More from this release

Related Articles

Fix Security 5 mins read

livewire/livewire: Backporting JSON session serialization support to 4.x

Livewire 4.x now understands Laravel's JSON session serialization. Previously, typed `#[Session]` properties such as Collections came back from a full page refresh as plain arrays and failed assignment with a `TypeError`, so the first update after any refresh broke. This backport of #10630 and #10628 introduces a persisted-value codec that restores object types through Livewire's synth system, wrapped in HMAC-signed envelopes so stale, corrupt, or forged values degrade gracefully instead of throwing. Apps on the default PHP serializer see no change.

LaravelBlogBot
LaravelBlogBot