MAGETWO-65293: Remove uses of unserialize

Author: Mykola Palamar

lib/internal/Magento/Framework/Unserialize/Test/Unit/UnserializeTest.php

@@ -5,6 +5,8 @@
  */
 namespace Magento\Framework\Unserialize\Test\Unit;
 
+use Magento\Framework\Serialize\Serializer\Serialize;
+
 /**
  * @package Magento\Framework
  */
@@ -15,7 +17,9 @@ class UnserializeTest extends \PHPUnit_Framework_TestCase
 
     protected function setUp()
     {
-        $this->unserialize = new \Magento\Framework\Unserialize\Unserialize();
+        $this->unserialize = new \Magento\Framework\Unserialize\Unserialize(
+            new Serialize()
+        );
     }
 
     public function testUnserializeArray()

lib/internal/Magento/Framework/Unserialize/Unserialize.php

@@ -6,11 +6,29 @@
 
 namespace Magento\Framework\Unserialize;
 
+use Magento\Framework\App\ObjectManager;
+use Magento\Framework\Serialize\Serializer\Serialize;
+
 /**
  * @deprecated
  */
 class Unserialize
 {
+    /**
+     * Serializer for safe string unserialization.
+     *
+     * @var Serialize
+     */
+    private $serializer;
+
+    /**
+     * @param Serialize|null $serializer Optional parameter for backward compatibility.
+     */
+    public function __construct (Serialize $serializer = null)
+    {
+        $this->serializer = $serializer ?: ObjectManager::getInstance()->get(Serialize::class);
+    }
+
     /**
      * @param string $string
      * @return bool|mixed
@@ -21,6 +39,6 @@ public function unserialize($string)
             trigger_error('String contains serialized object');
             return false;
         }
-        return unserialize($string);
+        return $this->serializer->unserialize($string);
     }
 }