Implements wrapper method for a more secure unserialize with PHP 7 (#13285)

* Implements wrapper method for a more secure unserialize

* run AllTests on PHP 7

* trigger a debug message if unserialize fails on PHP 7 + tests

* Add string to deserialize to debug log.

1 files changed, 2 insertions, 1 deletions

diff --git a/plugins/Annotations/AnnotationList.php b/plugins/Annotations/AnnotationList.php
index 823c7bf125..845cbfe9ae 100644
--- a/plugins/Annotations/AnnotationList.php
+++ b/plugins/Annotations/AnnotationList.php
@@ -9,6 +9,7 @@
 namespace Piwik\Plugins\Annotations;
 
 use Exception;
+use Piwik\Common;
 use Piwik\Date;
 use Piwik\Option;
 use Piwik\Piwik;
@@ -330,7 +331,7 @@ class AnnotationList
             $serialized = Option::get($optionName);
 
             if ($serialized !== false) {
-                $result[$id] = @unserialize($serialized);
+                $result[$id] = Common::safe_unserialize($serialized);
                 if (empty($result[$id])) {
                     // in case unserialize failed
                     $result[$id] = array();