Is escapeshellarg needed if passing serialized data?

[NotionCommotion]

I had been escaping my arguments before passing to exec(), and then type casting back on the other end.  Recently needed to pass an array, and at first planned on json_encode(), but gave serialize/unserialize a try and discovered that it automatically took care of the type casting.  The data is coming from me thus I am not (hopefully!) worried about malicious data.  Any need to also use escapeshellarg() either before or after serializing?  Thanks

[NotionCommotion]

Actually, looks like I need to use escapeshellarg(serialize($myArrayData));

[requinix]

Yeah, you definitely still need to use escapeshellarg. Escaping values isn't always about malicious data - sometimes it's simply about making sure that stuff doesn't get screwed up.

But serialize? Ew. I'd rather have the other process read JSON through stdin.