We do not need to unserialize() objects here

Author: sebastianbergmann

src/Runner/PhptTestCase.php

@@ -611,7 +611,7 @@ private function cleanupForCoverage(): array
             $buffer = @file_get_contents($files['coverage']);
 
             if ($buffer !== false) {
-                $coverage = @unserialize($buffer);
+                $coverage = @unserialize($buffer, ['allowed_classes' => false]);
 
                 if ($coverage === false) {
                     $coverage = [];