Harden unserialize() with allowed_classes => ['stdClass'] and add override hook

Harden unserialize() with allowed_classes => ['stdClass'] and add override hook #1496