node_export 7.x-3.3

https://www.drupal.org/sa-contrib-2024-061

Along with other protections, this release adds the 'allowed_classes' => FALSE option to unserialize() when importing content using the relevant format.

See: https://www.php.net/manual/en/function.unserialize.php

If for any reason you need that protection to be removed, you can set a variable - for example in settings.php:


$conf['node_export_allow_unsafe_unserialize'] = TRUE;