From ccbbf146456f46542efab6a249e47a9395bf6c30 Mon Sep 17 00:00:00 2001 From: michalsn Date: Tue, 1 Sep 2026 18:40:41 +0200 Subject: [PATCH] docs: clarify Entity array casts --- user_guide_src/source/models/entities.rst | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/user_guide_src/source/models/entities.rst b/user_guide_src/source/models/entities.rst index 56c17114138e..52fb020612d5 100644 --- a/user_guide_src/source/models/entities.rst +++ b/user_guide_src/source/models/entities.rst @@ -287,6 +287,10 @@ the value whenever the property is set: .. literalinclude:: entities/014.php +.. warning:: The ``array`` cast uses PHP serialization. Only read values previously + written through the same Entity cast. Never store untrusted serialized strings + directly in an ``array``-cast field. + CSV Casting -----------