diff --git a/config/cache.php b/config/cache.php index b32aead2..dd22aa71 100644 --- a/config/cache.php +++ b/config/cache.php @@ -114,4 +114,17 @@ return [ 'prefix' => env('CACHE_PREFIX', Str::slug((string) env('APP_NAME', 'laravel')).'-cache-'), + /* + |-------------------------------------------------------------------------- + | Serializable Classes + |-------------------------------------------------------------------------- + | + | This value determines the classes that can be unserialized from cache + | storage. By default, no PHP classes will get unserialized from the + | cache to prevent gadget chain attacks if your APP_KEY is leaked. + | + */ + + 'serializable_classes' => false, + ];