diff --git a/core/config/project_settings.cpp b/core/config/project_settings.cpp
index 6ac61ecbee4..abe52978852 100644
--- a/core/config/project_settings.cpp
+++ b/core/config/project_settings.cpp
@@ -784,7 +784,7 @@ Error ProjectSettings::_load_settings_text(const String &p_path) {
 		next_tag.fields.clear();
 		next_tag.name = String();
 
-		err = VariantParser::parse_tag_assign_eof(&stream, lines, error_text, next_tag, assign, value, nullptr, true);
+		err = VariantParser::parse_tag_assign_eof(&stream, lines, error_text, next_tag, assign, value, nullptr, true, true);
 		if (err == ERR_FILE_EOF) {
 			// If we're loading a project.godot from source code, we can operate some
 			// ProjectSettings conversions if need be.
@@ -986,7 +986,7 @@ Error ProjectSettings::_save_settings_text(const String &p_file, const RBMap<Str
 			}
 
 			String vstr;
-			VariantWriter::write_to_string(value, vstr);
+			VariantWriter::write_to_string(value, vstr, nullptr, nullptr, true, true);
 			file->store_string(F.property_name_encode() + "=" + vstr + "\n");
 		}
 	}
@@ -1446,6 +1446,7 @@ ProjectSettings::ProjectSettings() {
 	GLOBAL_DEF_BASIC("application/config/version", "");
 	GLOBAL_DEF_INTERNAL(PropertyInfo(Variant::STRING, "application/config/tags"), PackedStringArray());
 	GLOBAL_DEF_BASIC(PropertyInfo(Variant::STRING, "application/run/main_scene", PROPERTY_HINT_FILE, "*.tscn,*.scn,*.res"), "");
+	GLOBAL_DEF_RST("application/run/disable_modified_security_assistance", false);
 	GLOBAL_DEF("application/run/disable_stdout", false);
 	GLOBAL_DEF("application/run/disable_stderr", false);
 	GLOBAL_DEF("application/run/print_header", true);
diff --git a/core/io/config_file.compat.inc b/core/io/config_file.compat.inc
new file mode 100644
index 00000000000..d4bee527b92
--- /dev/null
+++ b/core/io/config_file.compat.inc
@@ -0,0 +1,81 @@
+/**************************************************************************/
+/*  config_file.compat.inc                                                */
+/**************************************************************************/
+/*                         This file is part of:                          */
+/*                             REDOT ENGINE                               */
+/*                        https://redotengine.org                         */
+/**************************************************************************/
+/* Copyright (c) 2024-present Redot Engine contributors                   */
+/*                                          (see REDOT_AUTHORS.md)        */
+/* Copyright (c) 2014-present Godot Engine contributors (see AUTHORS.md). */
+/* Copyright (c) 2007-2014 Juan Linietsky, Ariel Manzur.                  */
+/*                                                                        */
+/* Permission is hereby granted, free of charge, to any person obtaining  */
+/* a copy of this software and associated documentation files (the        */
+/* "Software"), to deal in the Software without restriction, including    */
+/* without limitation the rights to use, copy, modify, merge, publish,    */
+/* distribute, sublicense, and/or sell copies of the Software, and to     */
+/* permit persons to whom the Software is furnished to do so, subject to  */
+/* the following conditions:                                              */
+/*                                                                        */
+/* The above copyright notice and this permission notice shall be         */
+/* included in all copies or substantial portions of the Software.        */
+/*                                                                        */
+/* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,        */
+/* EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF     */
+/* MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. */
+/* IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY   */
+/* CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,   */
+/* TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE      */
+/* SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.                 */
+/**************************************************************************/
+
+#ifndef DISABLE_DEPRECATED
+
+Error ConfigFile::_save_bind_compat_redot764(const String &p_path) {
+	return save(p_path, false);
+}
+
+Error ConfigFile::_load_bind_compat_redot764(const String &p_path) {
+	return load(p_path, false);
+}
+
+Error ConfigFile::_parse_bind_compat_redot764(const String &p_path) {
+	return parse(p_path, false);
+}
+
+String ConfigFile::_encode_to_text_bind_compat_redot764() const {
+	return encode_to_text(false);
+}
+
+Error ConfigFile::_load_encrypted_bind_compat_redot764(const String &p_path, const Vector<uint8_t> &p_key) {
+	return load_encrypted(p_path, p_key, false);
+}
+
+Error ConfigFile::_load_encrypted_pass_bind_compat_redot764(const String &p_path, const String &p_pass) {
+	return load_encrypted_pass(p_path, p_pass, false);
+}
+
+Error ConfigFile::_save_encrypted_bind_compat_redot764(const String &p_path, const Vector<uint8_t> &p_key) {
+	return save_encrypted(p_path, p_key, false);
+}
+
+Error ConfigFile::_save_encrypted_pass_bind_compat_redot764(const String &p_path, const String &p_pass) {
+	return save_encrypted_pass(p_path, p_pass, false);
+}
+
+void ConfigFile::_bind_compatibility_methods() {
+	ClassDB::bind_compatibility_method(D_METHOD("save", "path"), &ConfigFile::_save_bind_compat_redot764);
+	ClassDB::bind_compatibility_method(D_METHOD("load", "path"), &ConfigFile::_load_bind_compat_redot764);
+	ClassDB::bind_compatibility_method(D_METHOD("parse", "data"), &ConfigFile::_parse_bind_compat_redot764);
+
+	ClassDB::bind_compatibility_method(D_METHOD("encode_to_text"), &ConfigFile::_encode_to_text_bind_compat_redot764);
+
+	ClassDB::bind_compatibility_method(D_METHOD("load_encrypted", "path", "key"), &ConfigFile::_load_encrypted_bind_compat_redot764);
+	ClassDB::bind_compatibility_method(D_METHOD("load_encrypted_pass", "path", "password"), &ConfigFile::_load_encrypted_pass_bind_compat_redot764);
+
+	ClassDB::bind_compatibility_method(D_METHOD("save_encrypted", "path", "key"), &ConfigFile::_save_encrypted_bind_compat_redot764);
+	ClassDB::bind_compatibility_method(D_METHOD("save_encrypted_pass", "path", "password"), &ConfigFile::_save_encrypted_pass_bind_compat_redot764);
+}
+
+#endif
diff --git a/core/io/config_file.cpp b/core/io/config_file.cpp
index 66d86befff2..cc4fc42a12d 100644
--- a/core/io/config_file.cpp
+++ b/core/io/config_file.cpp
@@ -31,6 +31,7 @@
 /**************************************************************************/
 
 #include "config_file.h"
+#include "config_file.compat.inc"
 
 #include "core/io/file_access_encrypted.h"
 #include "core/os/keyboard.h"
@@ -133,7 +134,7 @@ void ConfigFile::erase_section_key(const String &p_section, const String &p_key)
 	}
 }
 
-String ConfigFile::encode_to_text() const {
+String ConfigFile::encode_to_text(bool p_full_objects) const {
 	StringBuilder sb;
 	bool first = true;
 	for (const KeyValue<String, HashMap<String, Variant>> &E : values) {
@@ -148,14 +149,14 @@ String ConfigFile::encode_to_text() const {
 
 		for (const KeyValue<String, Variant> &F : E.value) {
 			String vstr;
-			VariantWriter::write_to_string(F.value, vstr);
+			VariantWriter::write_to_string(F.value, vstr, nullptr, nullptr, true, p_full_objects);
 			sb.append(F.key.property_name_encode() + "=" + vstr + "\n");
 		}
 	}
 	return sb.as_string();
 }
 
-Error ConfigFile::save(const String &p_path) {
+Error ConfigFile::save(const String &p_path, bool p_full_objects) {
 	Error err;
 	Ref<FileAccess> file = FileAccess::open(p_path, FileAccess::WRITE, &err);
 
@@ -163,10 +164,10 @@ Error ConfigFile::save(const String &p_path) {
 		return err;
 	}
 
-	return _internal_save(file);
+	return _internal_save(file, p_full_objects);
 }
 
-Error ConfigFile::save_encrypted(const String &p_path, const Vector<uint8_t> &p_key) {
+Error ConfigFile::save_encrypted(const String &p_path, const Vector<uint8_t> &p_key, bool p_full_objects) {
 	Error err;
 	Ref<FileAccess> f = FileAccess::open(p_path, FileAccess::WRITE, &err);
 
@@ -180,10 +181,10 @@ Error ConfigFile::save_encrypted(const String &p_path, const Vector<uint8_t> &p_
 	if (err) {
 		return err;
 	}
-	return _internal_save(fae);
+	return _internal_save(fae, p_full_objects);
 }
 
-Error ConfigFile::save_encrypted_pass(const String &p_path, const String &p_pass) {
+Error ConfigFile::save_encrypted_pass(const String &p_path, const String &p_pass, bool p_full_objects) {
 	Error err;
 	Ref<FileAccess> f = FileAccess::open(p_path, FileAccess::WRITE, &err);
 
@@ -198,10 +199,10 @@ Error ConfigFile::save_encrypted_pass(const String &p_path, const String &p_pass
 		return err;
 	}
 
-	return _internal_save(fae);
+	return _internal_save(fae, p_full_objects);
 }
 
-Error ConfigFile::_internal_save(Ref<FileAccess> file) {
+Error ConfigFile::_internal_save(Ref<FileAccess> file, bool p_full_objects) {
 	bool first = true;
 	for (const KeyValue<String, HashMap<String, Variant>> &E : values) {
 		if (first) {
@@ -215,7 +216,7 @@ Error ConfigFile::_internal_save(Ref<FileAccess> file) {
 
 		for (const KeyValue<String, Variant> &F : E.value) {
 			String vstr;
-			VariantWriter::write_to_string(F.value, vstr);
+			VariantWriter::write_to_string(F.value, vstr, nullptr, nullptr, true, p_full_objects);
 			file->store_string(F.key.property_name_encode() + "=" + vstr + "\n");
 		}
 	}
@@ -223,7 +224,7 @@ Error ConfigFile::_internal_save(Ref<FileAccess> file) {
 	return OK;
 }
 
-Error ConfigFile::load(const String &p_path) {
+Error ConfigFile::load(const String &p_path, bool p_allow_objects) {
 	Error err;
 	Ref<FileAccess> f = FileAccess::open(p_path, FileAccess::READ, &err);
 
@@ -231,10 +232,10 @@ Error ConfigFile::load(const String &p_path) {
 		return err;
 	}
 
-	return _internal_load(p_path, f);
+	return _internal_load(p_path, f, p_allow_objects);
 }
 
-Error ConfigFile::load_encrypted(const String &p_path, const Vector<uint8_t> &p_key) {
+Error ConfigFile::load_encrypted(const String &p_path, const Vector<uint8_t> &p_key, bool p_allow_objects) {
 	Error err;
 	Ref<FileAccess> f = FileAccess::open(p_path, FileAccess::READ, &err);
 
@@ -248,10 +249,10 @@ Error ConfigFile::load_encrypted(const String &p_path, const Vector<uint8_t> &p_
 	if (err) {
 		return err;
 	}
-	return _internal_load(p_path, fae);
+	return _internal_load(p_path, fae, p_allow_objects);
 }
 
-Error ConfigFile::load_encrypted_pass(const String &p_path, const String &p_pass) {
+Error ConfigFile::load_encrypted_pass(const String &p_path, const String &p_pass, bool p_allow_objects) {
 	Error err;
 	Ref<FileAccess> f = FileAccess::open(p_path, FileAccess::READ, &err);
 
@@ -266,25 +267,25 @@ Error ConfigFile::load_encrypted_pass(const String &p_path, const String &p_pass
 		return err;
 	}
 
-	return _internal_load(p_path, fae);
+	return _internal_load(p_path, fae, p_allow_objects);
 }
 
-Error ConfigFile::_internal_load(const String &p_path, Ref<FileAccess> f) {
+Error ConfigFile::_internal_load(const String &p_path, Ref<FileAccess> f, bool p_allow_objects) {
 	VariantParser::StreamFile stream;
 	stream.f = f;
 
-	Error err = _parse(p_path, &stream);
+	Error err = _parse(p_path, &stream, p_allow_objects);
 
 	return err;
 }
 
-Error ConfigFile::parse(const String &p_data) {
+Error ConfigFile::parse(const String &p_data, bool p_allow_objects) {
 	VariantParser::StreamString stream;
 	stream.s = p_data;
-	return _parse("<string>", &stream);
+	return _parse("<string>", &stream, p_allow_objects);
 }
 
-Error ConfigFile::_parse(const String &p_path, VariantParser::Stream *p_stream) {
+Error ConfigFile::_parse(const String &p_path, VariantParser::Stream *p_stream, bool p_allow_objects) {
 	String assign;
 	Variant value;
 	VariantParser::Tag next_tag;
@@ -295,11 +296,12 @@ Error ConfigFile::_parse(const String &p_path, VariantParser::Stream *p_stream)
 	String section;
 
 	while (true) {
-		assign = Variant();
+		assign = String();
+		value = Variant();
 		next_tag.fields.clear();
 		next_tag.name = String();
 
-		Error err = VariantParser::parse_tag_assign_eof(p_stream, lines, error_text, next_tag, assign, value, nullptr, true);
+		Error err = VariantParser::parse_tag_assign_eof(p_stream, lines, error_text, next_tag, assign, value, nullptr, true, p_allow_objects);
 		if (err == ERR_FILE_EOF) {
 			return OK;
 		} else if (err != OK) {
@@ -334,19 +336,19 @@ void ConfigFile::_bind_methods() {
 	ClassDB::bind_method(D_METHOD("erase_section", "section"), &ConfigFile::erase_section);
 	ClassDB::bind_method(D_METHOD("erase_section_key", "section", "key"), &ConfigFile::erase_section_key);
 
-	ClassDB::bind_method(D_METHOD("load", "path"), &ConfigFile::load);
-	ClassDB::bind_method(D_METHOD("parse", "data"), &ConfigFile::parse);
-	ClassDB::bind_method(D_METHOD("save", "path"), &ConfigFile::save);
+	ClassDB::bind_method(D_METHOD("load", "path", "allow_objects"), &ConfigFile::load, DEFVAL(false));
+	ClassDB::bind_method(D_METHOD("parse", "data", "allow_objects"), &ConfigFile::parse, DEFVAL(false));
+	ClassDB::bind_method(D_METHOD("save", "path", "full_objects"), &ConfigFile::save, DEFVAL(false));
 
-	ClassDB::bind_method(D_METHOD("encode_to_text"), &ConfigFile::encode_to_text);
+	ClassDB::bind_method(D_METHOD("encode_to_text", "full_objects"), &ConfigFile::encode_to_text, DEFVAL(false));
 
 	BIND_METHOD_ERR_RETURN_DOC("load", ERR_FILE_CANT_OPEN);
 
-	ClassDB::bind_method(D_METHOD("load_encrypted", "path", "key"), &ConfigFile::load_encrypted);
-	ClassDB::bind_method(D_METHOD("load_encrypted_pass", "path", "password"), &ConfigFile::load_encrypted_pass);
+	ClassDB::bind_method(D_METHOD("load_encrypted", "path", "key", "allow_objects"), &ConfigFile::load_encrypted, DEFVAL(false));
+	ClassDB::bind_method(D_METHOD("load_encrypted_pass", "path", "password", "allow_objects"), &ConfigFile::load_encrypted_pass, DEFVAL(false));
 
-	ClassDB::bind_method(D_METHOD("save_encrypted", "path", "key"), &ConfigFile::save_encrypted);
-	ClassDB::bind_method(D_METHOD("save_encrypted_pass", "path", "password"), &ConfigFile::save_encrypted_pass);
+	ClassDB::bind_method(D_METHOD("save_encrypted", "path", "key", "full_objects"), &ConfigFile::save_encrypted, DEFVAL(false));
+	ClassDB::bind_method(D_METHOD("save_encrypted_pass", "path", "password", "full_objects"), &ConfigFile::save_encrypted_pass, DEFVAL(false));
 
 	ClassDB::bind_method(D_METHOD("clear"), &ConfigFile::clear);
 }
diff --git a/core/io/config_file.h b/core/io/config_file.h
index f0f2c3e3813..d49ba50e435 100644
--- a/core/io/config_file.h
+++ b/core/io/config_file.h
@@ -45,14 +45,30 @@ class ConfigFile : public RefCounted {
 
 	PackedStringArray _get_sections() const;
 	PackedStringArray _get_section_keys(const String &p_section) const;
-	Error _internal_load(const String &p_path, Ref<FileAccess> f);
-	Error _internal_save(Ref<FileAccess> file);
+	Error _internal_load(const String &p_path, Ref<FileAccess> f, bool p_allow_objects);
+	Error _internal_save(Ref<FileAccess> file, bool p_full_objects);
 
-	Error _parse(const String &p_path, VariantParser::Stream *p_stream);
+	Error _parse(const String &p_path, VariantParser::Stream *p_stream, bool p_allow_objects);
 
 protected:
 	static void _bind_methods();
 
+#ifndef DISABLE_DEPRECATED
+	Error _save_bind_compat_redot764(const String &p_path);
+	Error _load_bind_compat_redot764(const String &p_path);
+	Error _parse_bind_compat_redot764(const String &p_path);
+
+	String _encode_to_text_bind_compat_redot764() const;
+
+	Error _load_encrypted_bind_compat_redot764(const String &p_path, const Vector<uint8_t> &p_key);
+	Error _load_encrypted_pass_bind_compat_redot764(const String &p_path, const String &p_pass);
+
+	Error _save_encrypted_bind_compat_redot764(const String &p_path, const Vector<uint8_t> &p_key);
+	Error _save_encrypted_pass_bind_compat_redot764(const String &p_path, const String &p_pass);
+
+	static void _bind_compatibility_methods();
+#endif
+
 public:
 	void set_value(const String &p_section, const String &p_key, const Variant &p_value);
 	Variant get_value(const String &p_section, const String &p_key, const Variant &p_default = Variant()) const;
@@ -66,19 +82,19 @@ class ConfigFile : public RefCounted {
 	void erase_section(const String &p_section);
 	void erase_section_key(const String &p_section, const String &p_key);
 
-	Error save(const String &p_path);
-	Error load(const String &p_path);
-	Error parse(const String &p_data);
+	Error save(const String &p_path, bool p_full_objects = false);
+	Error load(const String &p_path, bool p_allow_objects = false);
+	Error parse(const String &p_data, bool p_allow_objects = false);
 
-	String encode_to_text() const; // used by exporter
+	String encode_to_text(bool p_full_objects = false) const;
 
 	void clear();
 
-	Error load_encrypted(const String &p_path, const Vector<uint8_t> &p_key);
-	Error load_encrypted_pass(const String &p_path, const String &p_pass);
+	Error load_encrypted(const String &p_path, const Vector<uint8_t> &p_key, bool p_allow_objects = false);
+	Error load_encrypted_pass(const String &p_path, const String &p_pass, bool p_allow_objects = false);
 
-	Error save_encrypted(const String &p_path, const Vector<uint8_t> &p_key);
-	Error save_encrypted_pass(const String &p_path, const String &p_pass);
+	Error save_encrypted(const String &p_path, const Vector<uint8_t> &p_key, bool p_full_objects = false);
+	Error save_encrypted_pass(const String &p_path, const String &p_pass, bool p_full_objects = false);
 };
 
 #endif // CONFIG_FILE_H
diff --git a/core/io/resource_importer.cpp b/core/io/resource_importer.cpp
index 1e481d3aaa7..d4835f13c0a 100644
--- a/core/io/resource_importer.cpp
+++ b/core/io/resource_importer.cpp
@@ -73,7 +73,7 @@ Error ResourceFormatImporter::_get_path_and_type(const String &p_path, PathAndTy
 		next_tag.fields.clear();
 		next_tag.name = String();
 
-		err = VariantParser::parse_tag_assign_eof(&stream, lines, error_text, next_tag, assign, value, nullptr, true);
+		err = VariantParser::parse_tag_assign_eof(&stream, lines, error_text, next_tag, assign, value, nullptr, true, true);
 		if (err == ERR_FILE_EOF) {
 			return OK;
 		} else if (err != OK) {
@@ -333,7 +333,7 @@ void ResourceFormatImporter::get_internal_resource_path_list(const String &p_pat
 		next_tag.fields.clear();
 		next_tag.name = String();
 
-		err = VariantParser::parse_tag_assign_eof(&stream, lines, error_text, next_tag, assign, value, nullptr, true);
+		err = VariantParser::parse_tag_assign_eof(&stream, lines, error_text, next_tag, assign, value, nullptr, true, true);
 		if (err == ERR_FILE_EOF) {
 			return;
 		} else if (err != OK) {
@@ -548,12 +548,12 @@ void ResourceImporter::_bind_methods() {
 Error ResourceFormatImporterSaver::set_uid(const String &p_path, ResourceUID::ID p_uid) {
 	Ref<ConfigFile> cf;
 	cf.instantiate();
-	Error err = cf->load(p_path + ".import");
+	Error err = cf->load(p_path + ".import", true);
 	if (err != OK) {
 		return err;
 	}
 	cf->set_value("remap", "uid", ResourceUID::get_singleton()->id_to_text(p_uid));
-	cf->save(p_path + ".import");
+	cf->save(p_path + ".import", true);
 
 	return OK;
 }
diff --git a/core/io/resource_loader.cpp b/core/io/resource_loader.cpp
index df12a0a3fdc..28826ae2610 100644
--- a/core/io/resource_loader.cpp
+++ b/core/io/resource_loader.cpp
@@ -1220,7 +1220,7 @@ String ResourceLoader::_path_remap(const String &p_path, bool *r_translation_rem
 					next_tag.fields.clear();
 					next_tag.name = String();
 
-					err = VariantParser::parse_tag_assign_eof(&stream, lines, error_text, next_tag, assign, value, nullptr, true);
+					err = VariantParser::parse_tag_assign_eof(&stream, lines, error_text, next_tag, assign, value, nullptr, true, true);
 					if (err == ERR_FILE_EOF) {
 						break;
 					} else if (err != OK) {
diff --git a/core/variant/variant.cpp b/core/variant/variant.cpp
index 49119b9303d..9d6e727d861 100644
--- a/core/variant/variant.cpp
+++ b/core/variant/variant.cpp
@@ -3623,7 +3623,7 @@ void Variant::construct_from_string(const String &p_string, Variant &r_value, Ob
 
 String Variant::get_construct_string() const {
 	String vars;
-	VariantWriter::write_to_string(*this, vars);
+	VariantWriter::write_to_string(*this, vars, nullptr, nullptr, true, true);
 
 	return vars;
 }
diff --git a/core/variant/variant_parser.cpp b/core/variant/variant_parser.cpp
index fd04d14f2a1..649f8498019 100644
--- a/core/variant/variant_parser.cpp
+++ b/core/variant/variant_parser.cpp
@@ -32,6 +32,7 @@
 
 #include "variant_parser.h"
 
+#include "core/config/project_settings.h"
 #include "core/crypto/crypto_core.h"
 #include "core/input/input_event.h"
 #include "core/io/resource_loader.h"
@@ -674,10 +675,10 @@ Error VariantParser::_parse_byte_array(Stream *p_stream, Vector<uint8_t> &r_cons
 	return OK;
 }
 
-Error VariantParser::parse_value(Token &token, Variant &value, Stream *p_stream, int &line, String &r_err_str, ResourceParser *p_res_parser) {
+Error VariantParser::parse_value(Token &token, Variant &value, Stream *p_stream, int &line, String &r_err_str, ResourceParser *p_res_parser, bool p_allow_objects) {
 	if (token.type == TK_CURLY_BRACKET_OPEN) {
 		Dictionary d;
-		Error err = _parse_dictionary(d, p_stream, line, r_err_str, p_res_parser);
+		Error err = _parse_dictionary(d, p_stream, line, r_err_str, p_res_parser, p_allow_objects);
 		if (err) {
 			return err;
 		}
@@ -685,7 +686,7 @@ Error VariantParser::parse_value(Token &token, Variant &value, Stream *p_stream,
 		return OK;
 	} else if (token.type == TK_BRACKET_OPEN) {
 		Array a;
-		Error err = _parse_array(a, p_stream, line, r_err_str, p_res_parser);
+		Error err = _parse_array(a, p_stream, line, r_err_str, p_res_parser, p_allow_objects);
 		if (err) {
 			return err;
 		}
@@ -992,6 +993,11 @@ Error VariantParser::parse_value(Token &token, Variant &value, Stream *p_stream,
 				return ERR_PARSE_ERROR;
 			}
 		} else if (id == "Object") {
+			if (!p_allow_objects) {
+				r_err_str = R"(Object decoding is prevented because "allow_objects" is false)";
+				return ERR_UNAUTHORIZED;
+			}
+
 			get_token(p_stream, token, line, r_err_str);
 			if (token.type != TK_PARENTHESIS_OPEN) {
 				r_err_str = "Expected '('";
@@ -1077,7 +1083,7 @@ Error VariantParser::parse_value(Token &token, Variant &value, Stream *p_stream,
 					}
 
 					Variant v;
-					err = parse_value(token, v, p_stream, line, r_err_str, p_res_parser);
+					err = parse_value(token, v, p_stream, line, r_err_str, p_res_parser, p_allow_objects);
 					if (err) {
 						return err;
 					}
@@ -1087,6 +1093,11 @@ Error VariantParser::parse_value(Token &token, Variant &value, Stream *p_stream,
 				}
 			}
 		} else if (id == "Resource" || id == "SubResource" || id == "ExtResource") {
+			if (!p_allow_objects) {
+				r_err_str = R"(Object decoding is prevented because "allow_objects" is false)";
+				return ERR_UNAUTHORIZED;
+			}
+
 			get_token(p_stream, token, line, r_err_str);
 			if (token.type != TK_PARENTHESIS_OPEN) {
 				r_err_str = "Expected '('";
@@ -1309,8 +1320,13 @@ Error VariantParser::parse_value(Token &token, Variant &value, Stream *p_stream,
 			if (builtin_types.has(token.value)) {
 				array.set_typed(builtin_types.get(token.value), StringName(), Variant());
 			} else if (token.value == "Resource" || token.value == "SubResource" || token.value == "ExtResource") {
+				if (!p_allow_objects) {
+					r_err_str = R"(Object decoding is prevented because "allow_objects" is false)";
+					return ERR_UNAUTHORIZED;
+				}
+
 				Variant resource;
-				err = parse_value(token, resource, p_stream, line, r_err_str, p_res_parser);
+				err = parse_value(token, resource, p_stream, line, r_err_str, p_res_parser, p_allow_objects);
 				if (err) {
 					if (token.value == "Resource" && err == ERR_PARSE_ERROR && r_err_str == "Expected '('" && token.type == TK_BRACKET_CLOSE) {
 						err = OK;
@@ -1351,7 +1367,7 @@ Error VariantParser::parse_value(Token &token, Variant &value, Stream *p_stream,
 			}
 
 			Array values;
-			err = _parse_array(values, p_stream, line, r_err_str, p_res_parser);
+			err = _parse_array(values, p_stream, line, r_err_str, p_res_parser, p_allow_objects);
 			if (err) {
 				return err;
 			}
@@ -1598,7 +1614,7 @@ Error VariantParser::parse_value(Token &token, Variant &value, Stream *p_stream,
 	}
 }
 
-Error VariantParser::_parse_array(Array &array, Stream *p_stream, int &line, String &r_err_str, ResourceParser *p_res_parser) {
+Error VariantParser::_parse_array(Array &array, Stream *p_stream, int &line, String &r_err_str, ResourceParser *p_res_parser, bool p_allow_objects) {
 	Token token;
 	bool need_comma = false;
 
@@ -1628,7 +1644,7 @@ Error VariantParser::_parse_array(Array &array, Stream *p_stream, int &line, Str
 		}
 
 		Variant v;
-		err = parse_value(token, v, p_stream, line, r_err_str, p_res_parser);
+		err = parse_value(token, v, p_stream, line, r_err_str, p_res_parser, p_allow_objects);
 		if (err) {
 			return err;
 		}
@@ -1638,7 +1654,7 @@ Error VariantParser::_parse_array(Array &array, Stream *p_stream, int &line, Str
 	}
 }
 
-Error VariantParser::_parse_dictionary(Dictionary &object, Stream *p_stream, int &line, String &r_err_str, ResourceParser *p_res_parser) {
+Error VariantParser::_parse_dictionary(Dictionary &object, Stream *p_stream, int &line, String &r_err_str, ResourceParser *p_res_parser, bool p_allow_objects) {
 	bool at_key = true;
 	Variant key;
 	Token token;
@@ -1670,7 +1686,7 @@ Error VariantParser::_parse_dictionary(Dictionary &object, Stream *p_stream, int
 				}
 			}
 
-			err = parse_value(token, key, p_stream, line, r_err_str, p_res_parser);
+			err = parse_value(token, key, p_stream, line, r_err_str, p_res_parser, p_allow_objects);
 
 			if (err) {
 				return err;
@@ -1693,7 +1709,7 @@ Error VariantParser::_parse_dictionary(Dictionary &object, Stream *p_stream, int
 			}
 
 			Variant v;
-			err = parse_value(token, v, p_stream, line, r_err_str, p_res_parser);
+			err = parse_value(token, v, p_stream, line, r_err_str, p_res_parser, p_allow_objects);
 			if (err && err != ERR_FILE_MISSING_DEPENDENCIES) {
 				return err;
 			}
@@ -1704,7 +1720,7 @@ Error VariantParser::_parse_dictionary(Dictionary &object, Stream *p_stream, int
 	}
 }
 
-Error VariantParser::_parse_tag(Token &token, Stream *p_stream, int &line, String &r_err_str, Tag &r_tag, ResourceParser *p_res_parser, bool p_simple_tag) {
+Error VariantParser::_parse_tag(Token &token, Stream *p_stream, int &line, String &r_err_str, Tag &r_tag, ResourceParser *p_res_parser, bool p_simple_tag, bool p_allow_objects) {
 	r_tag.fields.clear();
 
 	if (token.type != TK_BRACKET_OPEN) {
@@ -1816,7 +1832,7 @@ Error VariantParser::_parse_tag(Token &token, Stream *p_stream, int &line, Strin
 
 		get_token(p_stream, token, line, r_err_str);
 		Variant value;
-		Error err = parse_value(token, value, p_stream, line, r_err_str, p_res_parser);
+		Error err = parse_value(token, value, p_stream, line, r_err_str, p_res_parser, p_allow_objects);
 		if (err) {
 			return err;
 		}
@@ -1827,7 +1843,7 @@ Error VariantParser::_parse_tag(Token &token, Stream *p_stream, int &line, Strin
 	return OK;
 }
 
-Error VariantParser::parse_tag(Stream *p_stream, int &line, String &r_err_str, Tag &r_tag, ResourceParser *p_res_parser, bool p_simple_tag) {
+Error VariantParser::parse_tag(Stream *p_stream, int &line, String &r_err_str, Tag &r_tag, ResourceParser *p_res_parser, bool p_simple_tag, bool p_allow_objects) {
 	Token token;
 	get_token(p_stream, token, line, r_err_str);
 
@@ -1840,10 +1856,10 @@ Error VariantParser::parse_tag(Stream *p_stream, int &line, String &r_err_str, T
 		return ERR_PARSE_ERROR;
 	}
 
-	return _parse_tag(token, p_stream, line, r_err_str, r_tag, p_res_parser, p_simple_tag);
+	return _parse_tag(token, p_stream, line, r_err_str, r_tag, p_res_parser, p_simple_tag, p_allow_objects);
 }
 
-Error VariantParser::parse_tag_assign_eof(Stream *p_stream, int &line, String &r_err_str, Tag &r_tag, String &r_assign, Variant &r_value, ResourceParser *p_res_parser, bool p_simple_tag) {
+Error VariantParser::parse_tag_assign_eof(Stream *p_stream, int &line, String &r_err_str, Tag &r_tag, String &r_assign, Variant &r_value, ResourceParser *p_res_parser, bool p_simple_tag, bool p_allow_objects) {
 	//assign..
 	r_assign = "";
 	String what;
@@ -1880,7 +1896,7 @@ Error VariantParser::parse_tag_assign_eof(Stream *p_stream, int &line, String &r
 			//it's a tag!
 			p_stream->saved = '['; //go back one
 
-			Error err = parse_tag(p_stream, line, r_err_str, r_tag, p_res_parser, p_simple_tag);
+			Error err = parse_tag(p_stream, line, r_err_str, r_tag, p_res_parser, p_simple_tag, p_allow_objects);
 
 			return err;
 		}
@@ -1906,7 +1922,7 @@ Error VariantParser::parse_tag_assign_eof(Stream *p_stream, int &line, String &r
 				r_assign = what;
 				Token token;
 				get_token(p_stream, token, line, r_err_str);
-				Error err = parse_value(token, r_value, p_stream, line, r_err_str, p_res_parser);
+				Error err = parse_value(token, r_value, p_stream, line, r_err_str, p_res_parser, p_allow_objects);
 				return err;
 			}
 		} else if (c == '\n') {
@@ -1915,7 +1931,7 @@ Error VariantParser::parse_tag_assign_eof(Stream *p_stream, int &line, String &r
 	}
 }
 
-Error VariantParser::parse(Stream *p_stream, Variant &r_ret, String &r_err_str, int &r_err_line, ResourceParser *p_res_parser) {
+Error VariantParser::parse(Stream *p_stream, Variant &r_ret, String &r_err_str, int &r_err_line, ResourceParser *p_res_parser, bool p_allow_objects) {
 	Token token;
 	Error err = get_token(p_stream, token, r_err_line, r_err_str);
 	if (err) {
@@ -1926,7 +1942,7 @@ Error VariantParser::parse(Stream *p_stream, Variant &r_ret, String &r_err_str,
 		return ERR_FILE_EOF;
 	}
 
-	return parse_value(token, r_ret, p_stream, r_err_line, r_err_str, p_res_parser);
+	return parse_value(token, r_ret, p_stream, r_err_line, r_err_str, p_res_parser, p_allow_objects);
 }
 
 //////////////////////////////////////////////////////////////////////////////////
@@ -1949,7 +1965,10 @@ static String rtos_fix(double p_value) {
 	}
 }
 
-Error VariantWriter::write(const Variant &p_variant, StoreStringFunc p_store_string_func, void *p_store_string_ud, EncodeResourceFunc p_encode_res_func, void *p_encode_res_ud, int p_recursion_count, bool p_compat) {
+Error VariantWriter::write(const Variant &p_variant, StoreStringFunc p_store_string_func, void *p_store_string_ud, EncodeResourceFunc p_encode_res_func, void *p_encode_res_ud, int p_recursion_count, bool p_compat, bool p_full_objects) {
+	static bool modified_security_assistance_disabled = GLOBAL_GET("application/run/disable_modified_security_assistance");
+	p_full_objects = p_full_objects || modified_security_assistance_disabled;
+
 	switch (p_variant.get_type()) {
 		case Variant::NIL: {
 			p_store_string_func(p_store_string_ud, "null");
@@ -2113,10 +2132,16 @@ Error VariantWriter::write(const Variant &p_variant, StoreStringFunc p_store_str
 		} break;
 
 		case Variant::OBJECT: {
+			if (!p_full_objects) {
+				ERR_PRINT(R"(Object encoding skipped because "full_objects" is false.)");
+				p_store_string_func(p_store_string_ud, "null");
+				break;
+			}
+
 			if (unlikely(p_recursion_count > MAX_RECURSION)) {
 				ERR_PRINT("Max recursion reached");
 				p_store_string_func(p_store_string_ud, "null");
-				return OK;
+				break;
 			}
 			p_recursion_count++;
 
@@ -2124,7 +2149,7 @@ Error VariantWriter::write(const Variant &p_variant, StoreStringFunc p_store_str
 
 			if (!obj) {
 				p_store_string_func(p_store_string_ud, "null");
-				break; // don't save it
+				break;
 			}
 
 			Ref<Resource> res = p_variant;
@@ -2169,7 +2194,7 @@ Error VariantWriter::write(const Variant &p_variant, StoreStringFunc p_store_str
 					}
 
 					p_store_string_func(p_store_string_ud, "\"" + E.name + "\":");
-					write(obj->get(E.name), p_store_string_func, p_store_string_ud, p_encode_res_func, p_encode_res_ud, p_recursion_count, p_compat);
+					write(obj->get(E.name), p_store_string_func, p_store_string_ud, p_encode_res_func, p_encode_res_ud, p_recursion_count, p_compat, p_full_objects);
 				}
 			}
 
@@ -2258,9 +2283,9 @@ Error VariantWriter::write(const Variant &p_variant, StoreStringFunc p_store_str
 					p_store_string_func(p_store_string_ud, "{\n");
 
 					for (List<Variant>::Element *E = keys.front(); E; E = E->next()) {
-						write(E->get(), p_store_string_func, p_store_string_ud, p_encode_res_func, p_encode_res_ud, p_recursion_count, p_compat);
+						write(E->get(), p_store_string_func, p_store_string_ud, p_encode_res_func, p_encode_res_ud, p_recursion_count, p_compat, p_full_objects);
 						p_store_string_func(p_store_string_ud, ": ");
-						write(dict[E->get()], p_store_string_func, p_store_string_ud, p_encode_res_func, p_encode_res_ud, p_recursion_count, p_compat);
+						write(dict[E->get()], p_store_string_func, p_store_string_ud, p_encode_res_func, p_encode_res_ud, p_recursion_count, p_compat, p_full_objects);
 						if (E->next()) {
 							p_store_string_func(p_store_string_ud, ",\n");
 						} else {
@@ -2288,18 +2313,23 @@ Error VariantWriter::write(const Variant &p_variant, StoreStringFunc p_store_str
 				Ref<Script> script = array.get_typed_script();
 
 				if (script.is_valid()) {
-					String resource_text = String();
-					if (p_encode_res_func) {
-						resource_text = p_encode_res_func(p_encode_res_ud, script);
-					}
-					if (resource_text.is_empty() && script->get_path().is_resource_file()) {
-						resource_text = "Resource(\"" + script->get_path() + "\")";
-					}
+					if (p_full_objects) {
+						String resource_text = String();
+						if (p_encode_res_func) {
+							resource_text = p_encode_res_func(p_encode_res_ud, script);
+						}
+						if (resource_text.is_empty() && script->get_path().is_resource_file()) {
+							resource_text = "Resource(\"" + script->get_path() + "\")";
+						}
 
-					if (!resource_text.is_empty()) {
-						p_store_string_func(p_store_string_ud, resource_text);
+						if (!resource_text.is_empty()) {
+							p_store_string_func(p_store_string_ud, resource_text);
+						} else {
+							ERR_PRINT("Failed to encode a path to a custom script for an array type.");
+							p_store_string_func(p_store_string_ud, class_name);
+						}
 					} else {
-						ERR_PRINT("Failed to encode a path to a custom script for an array type.");
+						ERR_PRINT(R"(Object encoding skipped because "full_objects" is false.)");
 						p_store_string_func(p_store_string_ud, class_name);
 					}
 				} else if (class_name != StringName()) {
@@ -2326,7 +2356,7 @@ Error VariantWriter::write(const Variant &p_variant, StoreStringFunc p_store_str
 					} else {
 						p_store_string_func(p_store_string_ud, ", ");
 					}
-					write(var, p_store_string_func, p_store_string_ud, p_encode_res_func, p_encode_res_ud, p_recursion_count, p_compat);
+					write(var, p_store_string_func, p_store_string_ud, p_encode_res_func, p_encode_res_ud, p_recursion_count, p_compat, p_full_objects);
 				}
 
 				p_store_string_func(p_store_string_ud, "]");
@@ -2509,8 +2539,8 @@ static Error _write_to_str(void *ud, const String &p_string) {
 	return OK;
 }
 
-Error VariantWriter::write_to_string(const Variant &p_variant, String &r_string, EncodeResourceFunc p_encode_res_func, void *p_encode_res_ud, bool p_compat) {
+Error VariantWriter::write_to_string(const Variant &p_variant, String &r_string, EncodeResourceFunc p_encode_res_func, void *p_encode_res_ud, bool p_compat, bool p_full_objects) {
 	r_string = String();
 
-	return write(p_variant, _write_to_str, &r_string, p_encode_res_func, p_encode_res_ud, 0, p_compat);
+	return write(p_variant, _write_to_str, &r_string, p_encode_res_func, p_encode_res_ud, 0, p_compat, p_full_objects);
 }
diff --git a/core/variant/variant_parser.h b/core/variant/variant_parser.h
index b46e0e0ce13..032f94e92a4 100644
--- a/core/variant/variant_parser.h
+++ b/core/variant/variant_parser.h
@@ -42,7 +42,7 @@ class VariantParser {
 	struct Stream {
 	private:
 		enum { READAHEAD_SIZE = 2048 };
-		char32_t readahead_buffer[READAHEAD_SIZE];
+		char32_t readahead_buffer[READAHEAD_SIZE]{};
 		uint32_t readahead_pointer = 0;
 		uint32_t readahead_filled = 0;
 		bool eof = false;
@@ -145,17 +145,17 @@ class VariantParser {
 	static Error _parse_construct(Stream *p_stream, Vector<T> &r_construct, int &line, String &r_err_str);
 	static Error _parse_byte_array(Stream *p_stream, Vector<uint8_t> &r_construct, int &line, String &r_err_str);
 	static Error _parse_enginecfg(Stream *p_stream, Vector<String> &strings, int &line, String &r_err_str);
-	static Error _parse_dictionary(Dictionary &object, Stream *p_stream, int &line, String &r_err_str, ResourceParser *p_res_parser = nullptr);
-	static Error _parse_array(Array &array, Stream *p_stream, int &line, String &r_err_str, ResourceParser *p_res_parser = nullptr);
-	static Error _parse_tag(Token &token, Stream *p_stream, int &line, String &r_err_str, Tag &r_tag, ResourceParser *p_res_parser = nullptr, bool p_simple_tag = false);
+	static Error _parse_dictionary(Dictionary &object, Stream *p_stream, int &line, String &r_err_str, ResourceParser *p_res_parser = nullptr, bool p_allow_objects = false);
+	static Error _parse_array(Array &array, Stream *p_stream, int &line, String &r_err_str, ResourceParser *p_res_parser = nullptr, bool p_allow_objects = false);
+	static Error _parse_tag(Token &token, Stream *p_stream, int &line, String &r_err_str, Tag &r_tag, ResourceParser *p_res_parser = nullptr, bool p_simple_tag = false, bool p_allow_objects = false);
 
 public:
-	static Error parse_tag(Stream *p_stream, int &line, String &r_err_str, Tag &r_tag, ResourceParser *p_res_parser = nullptr, bool p_simple_tag = false);
-	static Error parse_tag_assign_eof(Stream *p_stream, int &line, String &r_err_str, Tag &r_tag, String &r_assign, Variant &r_value, ResourceParser *p_res_parser = nullptr, bool p_simple_tag = false);
+	static Error parse_tag(Stream *p_stream, int &line, String &r_err_str, Tag &r_tag, ResourceParser *p_res_parser = nullptr, bool p_simple_tag = false, bool p_allow_objects = false);
+	static Error parse_tag_assign_eof(Stream *p_stream, int &line, String &r_err_str, Tag &r_tag, String &r_assign, Variant &r_value, ResourceParser *p_res_parser = nullptr, bool p_simple_tag = false, bool p_allow_objects = false);
 
-	static Error parse_value(Token &token, Variant &value, Stream *p_stream, int &line, String &r_err_str, ResourceParser *p_res_parser = nullptr);
+	static Error parse_value(Token &token, Variant &value, Stream *p_stream, int &line, String &r_err_str, ResourceParser *p_res_parser = nullptr, bool p_allow_objects = false);
 	static Error get_token(Stream *p_stream, Token &r_token, int &line, String &r_err_str);
-	static Error parse(Stream *p_stream, Variant &r_ret, String &r_err_str, int &r_err_line, ResourceParser *p_res_parser = nullptr);
+	static Error parse(Stream *p_stream, Variant &r_ret, String &r_err_str, int &r_err_line, ResourceParser *p_res_parser = nullptr, bool p_allow_objects = false);
 };
 
 class VariantWriter {
@@ -163,8 +163,8 @@ class VariantWriter {
 	typedef Error (*StoreStringFunc)(void *ud, const String &p_string);
 	typedef String (*EncodeResourceFunc)(void *ud, const Ref<Resource> &p_resource);
 
-	static Error write(const Variant &p_variant, StoreStringFunc p_store_string_func, void *p_store_string_ud, EncodeResourceFunc p_encode_res_func, void *p_encode_res_ud, int p_recursion_count = 0, bool p_compat = true);
-	static Error write_to_string(const Variant &p_variant, String &r_string, EncodeResourceFunc p_encode_res_func = nullptr, void *p_encode_res_ud = nullptr, bool p_compat = true);
+	static Error write(const Variant &p_variant, StoreStringFunc p_store_string_func, void *p_store_string_ud, EncodeResourceFunc p_encode_res_func, void *p_encode_res_ud, int p_recursion_count = 0, bool p_compat = true, bool p_full_objects = false);
+	static Error write_to_string(const Variant &p_variant, String &r_string, EncodeResourceFunc p_encode_res_func = nullptr, void *p_encode_res_ud = nullptr, bool p_compat = true, bool p_full_objects = false);
 };
 
 #endif // VARIANT_PARSER_H
diff --git a/core/variant/variant_utility.cpp b/core/variant/variant_utility.cpp
index 490ccd04a65..98f419c9457 100644
--- a/core/variant/variant_utility.cpp
+++ b/core/variant/variant_utility.cpp
@@ -1125,7 +1125,13 @@ void VariantUtilityFunctions::push_warning(const Variant **p_args, int p_arg_cou
 
 String VariantUtilityFunctions::var_to_str(const Variant &p_var) {
 	String vars;
-	VariantWriter::write_to_string(p_var, vars);
+	VariantWriter::write_to_string(p_var, vars, nullptr, nullptr, true, false);
+	return vars;
+}
+
+String VariantUtilityFunctions::var_to_str_with_objects(const Variant &p_var) {
+	String vars;
+	VariantWriter::write_to_string(p_var, vars, nullptr, nullptr, true, true);
 	return vars;
 }
 
@@ -1134,9 +1140,27 @@ Variant VariantUtilityFunctions::str_to_var(const String &p_var) {
 	ss.s = p_var;
 
 	String errs;
-	int line;
+	int line = 1;
+	Variant ret;
+	Error err = VariantParser::parse(&ss, ret, errs, line, nullptr, false);
+	if (err != OK) {
+		ERR_PRINT("Parse error at line " + itos(line) + ": " + errs + ".");
+	}
+
+	return ret;
+}
+
+Variant VariantUtilityFunctions::str_to_var_with_objects(const String &p_var) {
+	VariantParser::StreamString ss;
+	ss.s = p_var;
+
+	String errs;
+	int line = 1;
 	Variant ret;
-	(void)VariantParser::parse(&ss, ret, errs, line);
+	Error err = VariantParser::parse(&ss, ret, errs, line, nullptr, true);
+	if (err != OK) {
+		ERR_PRINT("Parse error at line " + itos(line) + ": " + errs + ".");
+	}
 
 	return ret;
 }
@@ -1821,6 +1845,9 @@ void Variant::_register_variant_utility_functions() {
 	FUNCBINDR(var_to_str, sarray("variable"), Variant::UTILITY_FUNC_TYPE_GENERAL);
 	FUNCBINDR(str_to_var, sarray("string"), Variant::UTILITY_FUNC_TYPE_GENERAL);
 
+	FUNCBINDR(var_to_str_with_objects, sarray("variable"), Variant::UTILITY_FUNC_TYPE_GENERAL);
+	FUNCBINDR(str_to_var_with_objects, sarray("string"), Variant::UTILITY_FUNC_TYPE_GENERAL);
+
 	FUNCBINDR(var_to_bytes, sarray("variable"), Variant::UTILITY_FUNC_TYPE_GENERAL);
 	FUNCBINDR(bytes_to_var, sarray("bytes"), Variant::UTILITY_FUNC_TYPE_GENERAL);
 
diff --git a/core/variant/variant_utility.h b/core/variant/variant_utility.h
index 067988e2466..dedb5b8f1ba 100644
--- a/core/variant/variant_utility.h
+++ b/core/variant/variant_utility.h
@@ -144,7 +144,9 @@ struct VariantUtilityFunctions {
 	static void push_error(const Variant **p_args, int p_arg_count, Callable::CallError &r_error);
 	static void push_warning(const Variant **p_args, int p_arg_count, Callable::CallError &r_error);
 	static String var_to_str(const Variant &p_var);
+	static String var_to_str_with_objects(const Variant &p_var);
 	static Variant str_to_var(const String &p_var);
+	static Variant str_to_var_with_objects(const String &p_var);
 	static PackedByteArray var_to_bytes(const Variant &p_var);
 	static PackedByteArray var_to_bytes_with_objects(const Variant &p_var);
 	static Variant bytes_to_var(const PackedByteArray &p_arr);
diff --git a/doc/classes/@GlobalScope.xml b/doc/classes/@GlobalScope.xml
index 660783a84a0..6aa7e637d10 100644
--- a/doc/classes/@GlobalScope.xml
+++ b/doc/classes/@GlobalScope.xml
@@ -1344,7 +1344,8 @@
 			<return type="Variant" />
 			<param index="0" name="string" type="String" />
 			<description>
-				Converts a formatted [param string] that was returned by [method var_to_str] to the original [Variant].
+				Converts a formatted [param string] that was returned by [method var_to_str] to the equivalent [Variant], without decoding objects.
+				[b]Note:[/b] If you need object deserialization, see [method str_to_var_with_objects].
 				[codeblocks]
 				[gdscript]
 				var data = '{ "a": 1, "b": 2 }' # data is a String
@@ -1359,6 +1360,14 @@
 				[/codeblocks]
 			</description>
 		</method>
+		<method name="str_to_var_with_objects">
+			<return type="Variant" />
+			<param index="0" name="string" type="String" />
+			<description>
+				Converts a formatted [param string] that was returned by [method var_to_str_with_objects] to the equivalent [Variant]. Decoding objects is allowed.
+				[b]Warning:[/b] Deserialized object can contain code which gets executed. Do not use this option if the serialized object comes from untrusted sources to avoid potential security threats (remote code execution).
+			</description>
+		</method>
 		<method name="tan">
 			<return type="float" />
 			<param index="0" name="angle_rad" type="float" />
@@ -1448,7 +1457,8 @@
 			<return type="String" />
 			<param index="0" name="variable" type="Variant" />
 			<description>
-				Converts a [Variant] [param variable] to a formatted [String] that can then be parsed using [method str_to_var].
+				Converts a [Variant] [param variable] to a formatted [String] that can then be parsed using [method str_to_var], without encoding objects.
+				[b]Note:[/b] If you need object serialization, see [method var_to_str_with_objects].
 				[codeblocks]
 				[gdscript]
 				var a = { "a": 1, "b": 2 }
@@ -1469,6 +1479,13 @@
 				[b]Note:[/b] Converting [Signal] or [Callable] is not supported and will result in an empty value for these types, regardless of their data.
 			</description>
 		</method>
+		<method name="var_to_str_with_objects">
+			<return type="String" />
+			<param index="0" name="variable" type="Variant" />
+			<description>
+				Converts a [Variant] [param variable] to a formatted [String] that can then be parsed using [method str_to_var_with_objects]. Encoding objects is allowed (and can potentially include executable code).
+			</description>
+		</method>
 		<method name="weakref">
 			<return type="Variant" />
 			<param index="0" name="obj" type="Variant" />
diff --git a/doc/classes/ConfigFile.xml b/doc/classes/ConfigFile.xml
index 5066970571d..041f132af54 100644
--- a/doc/classes/ConfigFile.xml
+++ b/doc/classes/ConfigFile.xml
@@ -100,8 +100,11 @@
 		</method>
 		<method name="encode_to_text" qualifiers="const">
 			<return type="String" />
+			<param index="0" name="full_objects" type="bool" default="false" />
 			<description>
-				Obtain the text version of this config file (the same text that would be written to a file).
+				Obtain the text version of this config file (the same text that would be written to a file). If [param full_objects] is [code]true[/code], encoding objects is allowed (and can potentially include code).
+				Internally, this uses the same encoding mechanism as the [method @GlobalScope.var_to_str] and [method @GlobalScope.var_to_str_with_objects] methods.
+				[b]Note:[/b] Not all properties are included. Only properties that are configured with the [constant PROPERTY_USAGE_STORAGE] flag set will be serialized. You can add an usage flag to a property by overriding the [method Object._validate_property] method in your class. In GDScript you can also use the [annotation @GDScript.@export] annotation. See [enum PropertyUsageFlags] for the possible usage flags.
 			</description>
 		</method>
 		<method name="erase_section">
@@ -161,61 +164,74 @@
 			<returns_error number="0"/>
 			<returns_error number="12"/>
 			<param index="0" name="path" type="String" />
+			<param index="1" name="allow_objects" type="bool" default="false" />
 			<description>
-				Loads the config file specified as a parameter. The file's contents are parsed and loaded in the [ConfigFile] object which the method was called on.
+				Loads the config file specified as a parameter. The file's contents are parsed and loaded in the [ConfigFile] object which the method was called on. If [param allow_objects] is [code]true[/code], decoding objects is allowed.
 				Returns [constant OK] on success, or one of the other [enum Error] values if the operation failed.
+				Internally, this uses the same decoding mechanism as the [method @GlobalScope.str_to_var] and [method @GlobalScope.str_to_var_with_objects] methods.
+				[b]Warning:[/b] Deserialized objects can contain code which gets executed. Do not use this option if the serialized object comes from untrusted sources to avoid potential security threats such as remote code execution.
 			</description>
 		</method>
 		<method name="load_encrypted">
 			<return type="int" enum="Error" />
 			<param index="0" name="path" type="String" />
 			<param index="1" name="key" type="PackedByteArray" />
+			<param index="2" name="allow_objects" type="bool" default="false" />
 			<description>
 				Loads the encrypted config file specified as a parameter, using the provided [param key] to decrypt it. The file's contents are parsed and loaded in the [ConfigFile] object which the method was called on.
-				Returns [constant OK] on success, or one of the other [enum Error] values if the operation failed.
+				See [method load] for details.
 			</description>
 		</method>
 		<method name="load_encrypted_pass">
 			<return type="int" enum="Error" />
 			<param index="0" name="path" type="String" />
 			<param index="1" name="password" type="String" />
+			<param index="2" name="allow_objects" type="bool" default="false" />
 			<description>
 				Loads the encrypted config file specified as a parameter, using the provided [param password] to decrypt it. The file's contents are parsed and loaded in the [ConfigFile] object which the method was called on.
-				Returns [constant OK] on success, or one of the other [enum Error] values if the operation failed.
+				See [method load] for details.
 			</description>
 		</method>
 		<method name="parse">
 			<return type="int" enum="Error" />
 			<param index="0" name="data" type="String" />
+			<param index="1" name="allow_objects" type="bool" default="false" />
 			<description>
-				Parses the passed string as the contents of a config file. The string is parsed and loaded in the ConfigFile object which the method was called on.
+				Parses the passed string as the contents of a config file. The string is parsed and loaded in the ConfigFile object which the method was called on. If [param allow_objects] is [code]true[/code], decoding objects is allowed.
 				Returns [constant OK] on success, or one of the other [enum Error] values if the operation failed.
+				Internally, this uses the same decoding mechanism as the [method @GlobalScope.str_to_var] and [method @GlobalScope.str_to_var_with_objects] methods.
+				[b]Warning:[/b] Deserialized objects can contain code which gets executed. Do not use this option if the serialized object comes from untrusted sources to avoid potential security threats such as remote code execution.
 			</description>
 		</method>
 		<method name="save">
 			<return type="int" enum="Error" />
 			<param index="0" name="path" type="String" />
+			<param index="1" name="full_objects" type="bool" default="false" />
 			<description>
-				Saves the contents of the [ConfigFile] object to the file specified as a parameter. The output file uses an INI-style structure.
+				Saves the contents of the [ConfigFile] object to the file specified as a parameter. The output file uses an INI-style structure. If [param full_objects] is [code]true[/code], encoding objects is allowed (and can potentially include code).
 				Returns [constant OK] on success, or one of the other [enum Error] values if the operation failed.
+				Internally, this uses the same encoding mechanism as the [method @GlobalScope.var_to_str] and [method @GlobalScope.var_to_str_with_objects] method.
+				[b]Note:[/b] Not all properties are included. Only properties that are configured with the [constant PROPERTY_USAGE_STORAGE] flag set will be serialized. You can add an usage flag to a property by overriding the [method Object._validate_property] method in your class. In GDScript you can also use the [annotation @GDScript.@export] annotation. See [enum PropertyUsageFlags] for the possible usage flags.
 			</description>
 		</method>
 		<method name="save_encrypted">
 			<return type="int" enum="Error" />
 			<param index="0" name="path" type="String" />
 			<param index="1" name="key" type="PackedByteArray" />
+			<param index="2" name="full_objects" type="bool" default="false" />
 			<description>
 				Saves the contents of the [ConfigFile] object to the AES-256 encrypted file specified as a parameter, using the provided [param key] to encrypt it. The output file uses an INI-style structure.
-				Returns [constant OK] on success, or one of the other [enum Error] values if the operation failed.
+				See [method save] for details.
 			</description>
 		</method>
 		<method name="save_encrypted_pass">
 			<return type="int" enum="Error" />
 			<param index="0" name="path" type="String" />
 			<param index="1" name="password" type="String" />
+			<param index="2" name="full_objects" type="bool" default="false" />
 			<description>
 				Saves the contents of the [ConfigFile] object to the AES-256 encrypted file specified as a parameter, using the provided [param password] to encrypt it. The output file uses an INI-style structure.
-				Returns [constant OK] on success, or one of the other [enum Error] values if the operation failed.
+				See [method save] for details.
 			</description>
 		</method>
 		<method name="set_value">
diff --git a/doc/classes/FileAccess.xml b/doc/classes/FileAccess.xml
index 7114948f234..471217209b9 100644
--- a/doc/classes/FileAccess.xml
+++ b/doc/classes/FileAccess.xml
@@ -273,7 +273,7 @@
 			<param index="0" name="allow_objects" type="bool" default="false" />
 			<description>
 				Returns the next [Variant] value from the file. If [param allow_objects] is [code]true[/code], decoding objects is allowed.
-				Internally, this uses the same decoding mechanism as the [method @GlobalScope.bytes_to_var] method.
+				Internally, this uses the same decoding mechanism as the [method @GlobalScope.bytes_to_var] and [method @GlobalScope.bytes_to_var_with_objects] methods.
 				[b]Warning:[/b] Deserialized objects can contain code which gets executed. Do not use this option if the serialized object comes from untrusted sources to avoid potential security threats such as remote code execution.
 			</description>
 		</method>
@@ -506,8 +506,8 @@
 			<param index="1" name="full_objects" type="bool" default="false" />
 			<description>
 				Stores any Variant value in the file. If [param full_objects] is [code]true[/code], encoding objects is allowed (and can potentially include code).
-				Internally, this uses the same encoding mechanism as the [method @GlobalScope.var_to_bytes] method.
-				[b]Note:[/b] Not all properties are included. Only properties that are configured with the [constant PROPERTY_USAGE_STORAGE] flag set will be serialized. You can add a new usage flag to a property by overriding the [method Object._get_property_list] method in your class. You can also check how property usage is configured by calling [method Object._get_property_list]. See [enum PropertyUsageFlags] for the possible usage flags.
+				Internally, this uses the same encoding mechanism as the [method @GlobalScope.var_to_bytes] and [method @GlobalScope.var_to_bytes_with_objects] methods.
+				[b]Note:[/b] Not all properties are included. Only properties that are configured with the [constant PROPERTY_USAGE_STORAGE] flag set will be serialized. You can add an usage flag to a property by overriding the [method Object._validate_property] method in your class. In GDScript you can also use the [annotation @GDScript.@export] annotation. See [enum PropertyUsageFlags] for the possible usage flags.
 			</description>
 		</method>
 	</methods>
diff --git a/doc/classes/ProjectSettings.xml b/doc/classes/ProjectSettings.xml
index 853958d1e5d..0f3bb9fc091 100644
--- a/doc/classes/ProjectSettings.xml
+++ b/doc/classes/ProjectSettings.xml
@@ -313,6 +313,19 @@
 			[b]Note:[/b] Delta smoothing is only attempted when [member display/window/vsync/vsync_mode] is set to [code]enabled[/code], as it does not work well without V-Sync.
 			It may take several seconds at a stable frame rate before the smoothing is initially activated. It will only be active on machines where performance is adequate to render frames at the refresh rate.
 		</member>
+		<member name="application/run/disable_modified_security_assistance" type="bool" setter="" getter="" default="false">
+			If [code]false[/code], enables security features intended to reduce exploit attack vectors which:
+			- Prevents [method @GlobalScope.var_to_str] from accepting [Object]s. Use [method @GlobalScope.var_to_str_with_objects] instead.
+			- Prevents [method @GlobalScope.str_to_var] from parsing [Object]s. Use [method @GlobalScope.str_to_var_with_objects] instead.
+			- Prevents [method ConfigFile.encode_to_text] from encoding [Object]s by default. Call with [code]allow_objects[/code] set to [code]true[/code] instead.
+			- Prevents [method ConfigFile.load] from loading [Object]s by default. Call with [code]allow_objects[/code] set to [code]true[/code] instead.
+			- Prevents [method ConfigFile.load_encrypted] from loading [Object]s by default. Call with [code]allow_objects[/code] set to [code]true[/code] instead.
+			- Prevents [method ConfigFile.load_encrypted_pass] from loading [Object]s by default. Call with [code]allow_objects[/code] set to [code]true[/code] instead.
+			- Prevents [method ConfigFile.parse] from parsing [Object]s in the [ConfigFile] by default. Call with [code]allow_objects[/code] set to [code]true[/code] instead.
+			- Prevents [method ConfigFile.save] from saving [Object]s by default. Call with [code]allow_objects[/code] set to [code]true[/code] instead.
+			- Prevents [method ConfigFile.save_encrypted] from saving [Object]s by default. Call with [code]allow_objects[/code] set to [code]true[/code] instead.
+			- Prevents [method ConfigFile.save_encrypted_pass] from saving [Object]s by default. Call with [code]allow_objects[/code] set to [code]true[/code] instead.
+		</member>
 		<member name="application/run/disable_stderr" type="bool" setter="" getter="" default="false">
 			If [code]true[/code], disables printing to standard error. If [code]true[/code], this also hides error and warning messages printed by [method @GlobalScope.push_error] and [method @GlobalScope.push_warning]. See also [member application/run/disable_stdout].
 			Changes to this setting will only be applied upon restarting the application. To control this at runtime, use [member Engine.print_error_messages].
diff --git a/editor/debugger/editor_file_server.cpp b/editor/debugger/editor_file_server.cpp
index ad70eb35089..d512c22c25f 100644
--- a/editor/debugger/editor_file_server.cpp
+++ b/editor/debugger/editor_file_server.cpp
@@ -60,7 +60,7 @@ void EditorFileServer::_scan_files_changed(EditorFileSystemDirectory *efd, const
 			// Todo the modified times of remapped files should most likely be kept in EditorFileSystem to speed this up in the future.
 			Ref<ConfigFile> cf;
 			cf.instantiate();
-			Error err = cf->load(f + ".import");
+			Error err = cf->load(f + ".import", true);
 
 			ERR_CONTINUE(err != OK);
 			{
diff --git a/editor/editor_file_system.cpp b/editor/editor_file_system.cpp
index 366fc48c754..bedbcd42dae 100644
--- a/editor/editor_file_system.cpp
+++ b/editor/editor_file_system.cpp
@@ -558,7 +558,7 @@ bool EditorFileSystem::_test_for_reimport(const String &p_path, const String &p_
 		next_tag.fields.clear();
 		next_tag.name = String();
 
-		err = VariantParser::parse_tag_assign_eof(&stream, lines, error_text, next_tag, assign, value, nullptr, true);
+		err = VariantParser::parse_tag_assign_eof(&stream, lines, error_text, next_tag, assign, value, nullptr, true, true);
 		if (err == ERR_FILE_EOF) {
 			break;
 		} else if (err != OK) {
@@ -643,7 +643,7 @@ bool EditorFileSystem::_test_for_reimport(const String &p_path, const String &p_
 		next_tag.fields.clear();
 		next_tag.name = String();
 
-		err = VariantParser::parse_tag_assign_eof(&md5_stream, lines, error_text, next_tag, assign, value, nullptr, true);
+		err = VariantParser::parse_tag_assign_eof(&md5_stream, lines, error_text, next_tag, assign, value, nullptr, true, true);
 
 		if (err == ERR_FILE_EOF) {
 			break;
@@ -2429,7 +2429,7 @@ Error EditorFileSystem::_reimport_group(const String &p_group_file, const Vector
 	for (int i = 0; i < p_files.size(); i++) {
 		Ref<ConfigFile> config;
 		config.instantiate();
-		Error err = config->load(p_files[i] + ".import");
+		Error err = config->load(p_files[i] + ".import", true);
 		ERR_CONTINUE(err != OK);
 		ERR_CONTINUE(!config->has_section_key("remap", "importer"));
 		String file_importer_name = config->get_value("remap", "importer");
@@ -2556,7 +2556,7 @@ Error EditorFileSystem::_reimport_group(const String &p_group_file, const Vector
 					v = source_file_options[file][base];
 				}
 				String value;
-				VariantWriter::write_to_string(v, value);
+				VariantWriter::write_to_string(v, value, nullptr, nullptr, true, true);
 				f->store_line(base + "=" + value);
 			}
 		}
@@ -2647,7 +2647,7 @@ Error EditorFileSystem::_reimport_file(const String &p_file, const HashMap<Strin
 		//use existing
 		Ref<ConfigFile> cf;
 		cf.instantiate();
-		Error err = cf->load(p_file + ".import");
+		Error err = cf->load(p_file + ".import", true);
 		if (err == OK) {
 			if (cf->has_section("params")) {
 				List<String> sk;
@@ -2808,7 +2808,7 @@ Error EditorFileSystem::_reimport_file(const String &p_file, const HashMap<Strin
 			}
 
 			String value;
-			VariantWriter::write_to_string(genf, value);
+			VariantWriter::write_to_string(genf, value, nullptr, nullptr, true, true);
 			f->store_line("files=" + value);
 			f->store_line("");
 		}
@@ -2832,7 +2832,7 @@ Error EditorFileSystem::_reimport_file(const String &p_file, const HashMap<Strin
 		for (const ResourceImporter::ImportOption &E : opts) {
 			String base = E.option.name;
 			String value;
-			VariantWriter::write_to_string(params[base], value);
+			VariantWriter::write_to_string(params[base], value, nullptr, nullptr, true, true);
 			f->store_line(base + "=" + value);
 		}
 	}
@@ -3274,7 +3274,7 @@ void EditorFileSystem::_move_group_files(EditorFileSystemDirectory *efd, const S
 			Ref<ConfigFile> config;
 			config.instantiate();
 			String path = efd->get_file_path(i) + ".import";
-			Error err = config->load(path);
+			Error err = config->load(path, true);
 			if (err != OK) {
 				continue;
 			}
@@ -3292,7 +3292,7 @@ void EditorFileSystem::_move_group_files(EditorFileSystemDirectory *efd, const S
 				}
 			}
 
-			config->save(path);
+			config->save(path, true);
 		}
 	}
 
diff --git a/editor/editor_run.cpp b/editor/editor_run.cpp
index 0d1d70e452c..09cf1f4a024 100644
--- a/editor/editor_run.cpp
+++ b/editor/editor_run.cpp
@@ -227,7 +227,7 @@ Error EditorRun::run(const String &p_scene, const String &p_write_movie) {
 
 	// Pass the debugger stop shortcut to the running instance(s).
 	String shortcut;
-	VariantWriter::write_to_string(ED_GET_SHORTCUT("editor/stop_running_project"), shortcut);
+	VariantWriter::write_to_string(ED_GET_SHORTCUT("editor/stop_running_project"), shortcut, nullptr, nullptr, true, true);
 	OS::get_singleton()->set_environment("__GODOT_EDITOR_STOP_SHORTCUT__", shortcut);
 
 	String exec = OS::get_singleton()->get_executable_path();
diff --git a/editor/export/editor_export_platform.cpp b/editor/export/editor_export_platform.cpp
index d5af294a5eb..1516592e72a 100644
--- a/editor/export/editor_export_platform.cpp
+++ b/editor/export/editor_export_platform.cpp
@@ -1189,7 +1189,7 @@ Error EditorExportPlatform::export_project_files(const Ref<EditorExportPreset> &
 		Ref<ConfigFile> config;
 		if (has_import_file) {
 			config.instantiate();
-			err = config->load(path + ".import");
+			err = config->load(path + ".import", true);
 			if (err != OK) {
 				ERR_PRINT("Could not parse: '" + path + "', not exported.");
 				continue;
@@ -1287,7 +1287,7 @@ Error EditorExportPlatform::export_project_files(const Ref<EditorExportPreset> &
 					config->erase_section("params");
 				}
 
-				String import_text = config->encode_to_text();
+				String import_text = config->encode_to_text(true);
 				CharString cs = import_text.utf8();
 				Vector<uint8_t> sarr;
 				sarr.resize(cs.size());
@@ -1356,7 +1356,7 @@ Error EditorExportPlatform::export_project_files(const Ref<EditorExportPreset> &
 					config->erase_section("params");
 				}
 
-				String import_text = config->encode_to_text();
+				String import_text = config->encode_to_text(true);
 				CharString cs = import_text.utf8();
 				Vector<uint8_t> sarr;
 				sarr.resize(cs.size());
diff --git a/editor/filesystem_dock.cpp b/editor/filesystem_dock.cpp
index 3e24cba4893..3914798b7b2 100644
--- a/editor/filesystem_dock.cpp
+++ b/editor/filesystem_dock.cpp
@@ -1201,7 +1201,7 @@ void FileSystemDock::_select_file(const String &p_path, bool p_select_in_favorit
 		if (FileAccess::exists(fpath + ".import")) {
 			Ref<ConfigFile> config;
 			config.instantiate();
-			Error err = config->load(fpath + ".import");
+			Error err = config->load(fpath + ".import", true);
 			if (err == OK) {
 				if (config->has_section_key("remap", "importer")) {
 					String importer = config->get_value("remap", "importer");
@@ -3787,7 +3787,7 @@ void FileSystemDock::_update_import_dock() {
 		const String &fpath = efiles[i];
 		Ref<ConfigFile> cf;
 		cf.instantiate();
-		Error err = cf->load(fpath + ".import");
+		Error err = cf->load(fpath + ".import", true);
 		if (err != OK) {
 			imports.clear();
 			break;
diff --git a/editor/import/3d/scene_import_settings.cpp b/editor/import/3d/scene_import_settings.cpp
index 615da9ed987..1c623878927 100644
--- a/editor/import/3d/scene_import_settings.cpp
+++ b/editor/import/3d/scene_import_settings.cpp
@@ -753,7 +753,7 @@ void SceneImportSettingsDialog::open_settings(const String &p_path, const String
 
 		Ref<ConfigFile> config;
 		config.instantiate();
-		Error err = config->load(p_path + ".import");
+		Error err = config->load(p_path + ".import", true);
 		if (err == OK) {
 			List<String> keys;
 			config->get_section_keys("params", &keys);
diff --git a/editor/import/audio_stream_import_settings.cpp b/editor/import/audio_stream_import_settings.cpp
index def66a3362d..64ab48aee25 100644
--- a/editor/import/audio_stream_import_settings.cpp
+++ b/editor/import/audio_stream_import_settings.cpp
@@ -429,7 +429,7 @@ void AudioStreamImportSettingsDialog::edit(const String &p_path, const String &p
 	if (stream.is_valid()) {
 		Ref<ConfigFile> config_file;
 		config_file.instantiate();
-		Error err = config_file->load(p_path + ".import");
+		Error err = config_file->load(p_path + ".import", true);
 		updating_settings = true;
 		if (err == OK) {
 			double bpm = config_file->get_value("params", "bpm", 0);
diff --git a/editor/import/dynamic_font_import_settings.cpp b/editor/import/dynamic_font_import_settings.cpp
index 3ac96810007..6700a2bfa4d 100644
--- a/editor/import/dynamic_font_import_settings.cpp
+++ b/editor/import/dynamic_font_import_settings.cpp
@@ -1152,7 +1152,7 @@ void DynamicFontImportSettingsDialog::open_settings(const String &p_path) {
 	config.instantiate();
 	ERR_FAIL_COND(config.is_null());
 
-	Error err = config->load(p_path + ".import");
+	Error err = config->load(p_path + ".import", true);
 	print_verbose("Loading import settings:");
 	if (err == OK) {
 		List<String> keys;
diff --git a/editor/import/resource_importer_texture.cpp b/editor/import/resource_importer_texture.cpp
index deeaaf22e96..9e381595be4 100644
--- a/editor/import/resource_importer_texture.cpp
+++ b/editor/import/resource_importer_texture.cpp
@@ -105,7 +105,7 @@ void ResourceImporterTexture::update_imports() {
 			cf.instantiate();
 			String src_path = String(E.key) + ".import";
 
-			Error err = cf->load(src_path);
+			Error err = cf->load(src_path, true);
 			ERR_CONTINUE(err != OK);
 
 			bool changed = false;
@@ -152,7 +152,7 @@ void ResourceImporterTexture::update_imports() {
 			}
 
 			if (changed) {
-				cf->save(src_path);
+				cf->save(src_path, true);
 				to_reimport.push_back(E.key);
 			}
 		}
diff --git a/editor/import_dock.cpp b/editor/import_dock.cpp
index 583526e6e6d..7f852df070a 100644
--- a/editor/import_dock.cpp
+++ b/editor/import_dock.cpp
@@ -101,7 +101,7 @@ ImportDock *ImportDock::singleton = nullptr;
 void ImportDock::set_edit_path(const String &p_path) {
 	Ref<ConfigFile> config;
 	config.instantiate();
-	Error err = config->load(p_path + ".import");
+	Error err = config->load(p_path + ".import", true);
 	if (err != OK) {
 		clear();
 		return;
@@ -235,7 +235,7 @@ void ImportDock::set_edit_multiple_paths(const Vector<String> &p_paths) {
 		Ref<ConfigFile> config;
 		config.instantiate();
 		extensions.insert(p_paths[i].get_extension());
-		Error err = config->load(p_paths[i] + ".import");
+		Error err = config->load(p_paths[i] + ".import", true);
 		ERR_CONTINUE(err != OK);
 
 		if (i == 0) {
@@ -422,7 +422,7 @@ void ImportDock::_importer_selected(int i_idx) {
 		if (params->paths.size()) {
 			String path = params->paths[0];
 			config.instantiate();
-			Error err = config->load(path + ".import");
+			Error err = config->load(path + ".import", true);
 			if (err != OK) {
 				config.unref();
 			}
@@ -559,7 +559,7 @@ void ImportDock::_reimport_attempt() {
 	for (int i = 0; i < params->paths.size(); i++) {
 		Ref<ConfigFile> config;
 		config.instantiate();
-		Error err = config->load(params->paths[i] + ".import");
+		Error err = config->load(params->paths[i] + ".import", true);
 		ERR_CONTINUE(err != OK);
 
 		String imported_with = config->get_value("remap", "importer");
@@ -640,7 +640,7 @@ void ImportDock::_reimport() {
 	for (int i = 0; i < params->paths.size(); i++) {
 		Ref<ConfigFile> config;
 		config.instantiate();
-		Error err = config->load(params->paths[i] + ".import");
+		Error err = config->load(params->paths[i] + ".import", true);
 		ERR_CONTINUE(err != OK);
 
 		if (params->importer.is_valid()) {
@@ -688,7 +688,7 @@ void ImportDock::_reimport() {
 			}
 		}
 
-		config->save(params->paths[i] + ".import");
+		config->save(params->paths[i] + ".import", true);
 	}
 
 	EditorFileSystem::get_singleton()->reimport_files(params->paths);
diff --git a/editor/plugins/gpu_particles_collision_sdf_editor_plugin.cpp b/editor/plugins/gpu_particles_collision_sdf_editor_plugin.cpp
index bceca33c6bc..9ad5b1368f9 100644
--- a/editor/plugins/gpu_particles_collision_sdf_editor_plugin.cpp
+++ b/editor/plugins/gpu_particles_collision_sdf_editor_plugin.cpp
@@ -152,7 +152,7 @@ void GPUParticlesCollisionSDF3DEditorPlugin::_sdf_save_path_and_bake(const Strin
 
 		config.instantiate();
 		if (FileAccess::exists(p_path + ".import")) {
-			config->load(p_path + ".import");
+			config->load(p_path + ".import", true);
 		}
 
 		config->set_value("remap", "importer", "3d_texture");
@@ -165,7 +165,7 @@ void GPUParticlesCollisionSDF3DEditorPlugin::_sdf_save_path_and_bake(const Strin
 		config->set_value("params", "slices/horizontal", 1);
 		config->set_value("params", "slices/vertical", bake_img->get_meta("depth"));
 
-		config->save(p_path + ".import");
+		config->save(p_path + ".import", true);
 
 		Error err = bake_img->save_exr(p_path, false);
 		ERR_FAIL_COND(err);
diff --git a/editor/project_manager/project_dialog.cpp b/editor/project_manager/project_dialog.cpp
index 97502bf3eff..2229f2d997f 100644
--- a/editor/project_manager/project_dialog.cpp
+++ b/editor/project_manager/project_dialog.cpp
@@ -686,14 +686,14 @@ void ProjectDialog::ok_pressed() {
 		// Load project.godot as ConfigFile to set the new name.
 		ConfigFile cfg;
 		String project_godot = path.path_join("project.godot");
-		Error err = cfg.load(project_godot);
+		Error err = cfg.load(project_godot, true);
 		if (err != OK) {
 			dialog_error->set_text(vformat(TTR("Couldn't load project at '%s' (error %d). It may be missing or corrupted."), project_godot, err));
 			dialog_error->popup_centered();
 			return;
 		}
 		cfg.set_value("application", "config/name", project_name->get_text().strip_edges());
-		err = cfg.save(project_godot);
+		err = cfg.save(project_godot, true);
 		if (err != OK) {
 			dialog_error->set_text(vformat(TTR("Couldn't save project at '%s' (error %d)."), project_godot, err));
 			dialog_error->popup_centered();
diff --git a/editor/project_manager/project_list.cpp b/editor/project_manager/project_list.cpp
index d1d7e9913b4..f62259d1bfc 100644
--- a/editor/project_manager/project_list.cpp
+++ b/editor/project_manager/project_list.cpp
@@ -421,7 +421,7 @@ ProjectList::Item ProjectList::load_project_data(const String &p_path, bool p_fa
 	bool missing = false;
 
 	Ref<ConfigFile> cf = memnew(ConfigFile);
-	Error cf_err = cf->load(conf);
+	Error cf_err = cf->load(conf, true);
 
 	int config_version = 0;
 	String project_name = TTR("Unnamed Project");
diff --git a/editor/surface_upgrade_tool.cpp b/editor/surface_upgrade_tool.cpp
index 6f6cd8c33ef..751e672d8a7 100644
--- a/editor/surface_upgrade_tool.cpp
+++ b/editor/surface_upgrade_tool.cpp
@@ -142,7 +142,7 @@ void SurfaceUpgradeTool::finish_upgrade() {
 	for (const String &file_path : reimport_paths) {
 		Ref<ConfigFile> config;
 		config.instantiate();
-		Error err = config->load(file_path);
+		Error err = config->load(file_path, true);
 		if (err != OK) {
 			ERR_PRINT("Could not open " + file_path + " for upgrade.");
 			continue;
diff --git a/main/main.cpp b/main/main.cpp
index f30850e5654..cc737f1a045 100644
--- a/main/main.cpp
+++ b/main/main.cpp
@@ -1988,6 +1988,10 @@ Error Main::setup(const char *execpath, int argc, char *argv[], bool p_second_ph
 
 	OS::get_singleton()->set_cmdline(execpath, main_args, user_args);
 
+	if (GLOBAL_GET("application/run/disable_modified_security_assistance")) {
+		WARN_PRINT("Modified Security Assistance disabled, this application can perform unsafe behavior by default. Consider disabling application/run/disable_modified_security_assistance in the Project Settings.");
+	}
+
 	{
 		String driver_hints = "";
 		String driver_hints_with_d3d12 = "";
@@ -2801,7 +2805,7 @@ Error Main::setup2(bool p_show_boot_logo) {
 						next_tag.fields.clear();
 						next_tag.name = String();
 
-						err = VariantParser::parse_tag_assign_eof(&stream, lines, error_text, next_tag, assign, value, &rp_new, true);
+						err = VariantParser::parse_tag_assign_eof(&stream, lines, error_text, next_tag, assign, value, &rp_new, true, true);
 						if (err == ERR_FILE_EOF) {
 							break;
 						}
diff --git a/misc/extension_api_validation/4.3-stable.expected b/misc/extension_api_validation/4.3-stable.expected
index 960edd0575e..18f2fb81757 100644
--- a/misc/extension_api_validation/4.3-stable.expected
+++ b/misc/extension_api_validation/4.3-stable.expected
@@ -95,3 +95,17 @@ Validate extension JSON: Error: Field 'classes/InputMap/methods/add_action/argum
 
 Default deadzone value was changed. No adjustments should be necessary.
 Compatibility method registered.
+
+
+GH-Redot-764
+--------
+Validate extension JSON: Error: Field 'classes/ConfigFile/methods/load/arguments': size changed value in new API, from 1 to 2.
+Validate extension JSON: Error: Field 'classes/ConfigFile/methods/load_encrypted/arguments': size changed value in new API, from 2 to 3.
+Validate extension JSON: Error: Field 'classes/ConfigFile/methods/load_encrypted_pass/arguments': size changed value in new API, from 2 to 3.
+Validate extension JSON: Error: Field 'classes/ConfigFile/methods/parse/arguments': size changed value in new API, from 1 to 2.
+Validate extension JSON: Error: Field 'classes/ConfigFile/methods/save/arguments': size changed value in new API, from 1 to 2.
+Validate extension JSON: Error: Field 'classes/ConfigFile/methods/save_encrypted/arguments': size changed value in new API, from 2 to 3.
+Validate extension JSON: Error: Field 'classes/ConfigFile/methods/save_encrypted_pass/arguments': size changed value in new API, from 2 to 3.
+Validate extension JSON: JSON file: Field was added in a way that breaks compatibility 'classes/ConfigFile/methods/encode_to_text': arguments
+
+Added optional argument. Compatibility method registered. Behavior compatibility broken for security and consistency with binary serialization. Object encoding/decoding is now disabled by default. Can be disabled by Project Setting.
diff --git a/modules/gdscript/tests/scripts/runtime/features/metatypes.gd b/modules/gdscript/tests/scripts/runtime/features/metatypes.gd
index d6847768e67..1c7ac599718 100644
--- a/modules/gdscript/tests/scripts/runtime/features/metatypes.gd
+++ b/modules/gdscript/tests/scripts/runtime/features/metatypes.gd
@@ -11,7 +11,7 @@ var test_class := MyClass
 var test_enum := MyEnum
 
 func check_gdscript_native_class(value: Variant) -> void:
-	print(var_to_str(value).get_slice(",", 0).trim_prefix("Object("))
+	print(var_to_str_with_objects(value).get_slice(",", 0).trim_prefix("Object("))
 
 func check_gdscript(value: GDScript) -> void:
 	print(value.get_class())
diff --git a/modules/gltf/gltf_document.cpp b/modules/gltf/gltf_document.cpp
index b962d30c54e..925a98026d0 100644
--- a/modules/gltf/gltf_document.cpp
+++ b/modules/gltf/gltf_document.cpp
@@ -3519,7 +3519,7 @@ void GLTFDocument::_parse_image_save_image(Ref<GLTFState> p_state, const Vector<
 			if (FileAccess::exists(file_path + ".import")) {
 				Ref<ConfigFile> config;
 				config.instantiate();
-				config->load(file_path + ".import");
+				config->load(file_path + ".import", true);
 				if (config->has_section_key("remap", "generator_parameters")) {
 					generator_parameters = (Dictionary)config->get_value("remap", "generator_parameters");
 				}
diff --git a/modules/mono/glue/GodotSharp/GodotSharp/Core/GD.cs b/modules/mono/glue/GodotSharp/GodotSharp/Core/GD.cs
index 33ebb8171e8..04688d99a0c 100644
--- a/modules/mono/glue/GodotSharp/GodotSharp/Core/GD.cs
+++ b/modules/mono/glue/GodotSharp/GodotSharp/Core/GD.cs
@@ -605,7 +605,8 @@ public static void Seed(ulong seed)
 
         /// <summary>
         /// Converts a formatted string that was returned by <see cref="VarToStr(Variant)"/>
-        /// to the original value.
+        /// to the equivalent value, without decoding objects.
+        /// Note: If you need object deserialization, see <see cref="StrToVarWithObjects"/>.
         /// </summary>
         /// <example>
         /// <code>
@@ -619,7 +620,23 @@ public static void Seed(ulong seed)
         public static Variant StrToVar(string str)
         {
             using var godotStr = Marshaling.ConvertStringToNative(str);
-            NativeFuncs.godotsharp_str_to_var(godotStr, out godot_variant ret);
+            NativeFuncs.godotsharp_str_to_var(godotStr, godot_bool.False, out godot_variant ret);
+            return Variant.CreateTakingOwnershipOfDisposableValue(ret);
+        }
+
+        /// <summary>
+        /// Converts a formatted string that was returned by <see cref="VarToStrWithObjects(Variant)"/>
+        /// to the equivalent value. Decoding objects is allowed.
+        /// Warning: Deserialized object can contain code which gets executed. Do not use this
+        /// option if the serialized object comes from untrusted sources to avoid potential security
+        /// threats (remote code execution).
+        /// </summary>
+        /// <param name="str">String that will be converted to Variant.</param>
+        /// <returns>The decoded <c>Variant</c>.</returns>
+        public static Variant StrToVarWithObjects(string str)
+        {
+            using var godotStr = Marshaling.ConvertStringToNative(str);
+            NativeFuncs.godotsharp_str_to_var(godotStr, godot_bool.True, out godot_variant ret);
             return Variant.CreateTakingOwnershipOfDisposableValue(ret);
         }
 
@@ -652,7 +669,8 @@ public static byte[] VarToBytesWithObjects(Variant var)
 
         /// <summary>
         /// Converts a <see cref="Variant"/> <paramref name="var"/> to a formatted string that
-        /// can later be parsed using <see cref="StrToVar(string)"/>.
+        /// can later be parsed using <see cref="StrToVar(string)"/>, without encoding objects.
+        /// Note: If you need object serialization, see <see cref="VarToStrWithObjects"/>.
         /// </summary>
         /// <example>
         /// <code>
@@ -669,7 +687,21 @@ public static byte[] VarToBytesWithObjects(Variant var)
         /// <returns>The <see cref="Variant"/> encoded as a string.</returns>
         public static string VarToStr(Variant var)
         {
-            NativeFuncs.godotsharp_var_to_str((godot_variant)var.NativeVar, out godot_string ret);
+            NativeFuncs.godotsharp_var_to_str((godot_variant)var.NativeVar, godot_bool.False, out godot_string ret);
+            using (ret)
+                return Marshaling.ConvertStringToManaged(ret);
+        }
+
+        /// <summary>
+        /// Converts a <see cref="Variant"/> <paramref name="var"/> to a formatted string that
+        /// can later be parsed using <see cref="StrToVarWithObjects(string)"/>.
+        /// Encoding objects is allowed (and can potentially include executable code).
+        /// </summary>
+        /// <param name="var">Variant that will be converted to string.</param>
+        /// <returns>The <see cref="Variant"/> encoded as a string.</returns>
+        public static string VarToStrWithObjects(Variant var)
+        {
+            NativeFuncs.godotsharp_var_to_str((godot_variant)var.NativeVar, godot_bool.True, out godot_string ret);
             using (ret)
                 return Marshaling.ConvertStringToManaged(ret);
         }
diff --git a/modules/mono/glue/GodotSharp/GodotSharp/Core/NativeInterop/NativeFuncs.cs b/modules/mono/glue/GodotSharp/GodotSharp/Core/NativeInterop/NativeFuncs.cs
index 6a643833f6a..630052486d2 100644
--- a/modules/mono/glue/GodotSharp/GodotSharp/Core/NativeInterop/NativeFuncs.cs
+++ b/modules/mono/glue/GodotSharp/GodotSharp/Core/NativeInterop/NativeFuncs.cs
@@ -549,12 +549,12 @@ internal static partial void godotsharp_convert(in godot_variant p_what, int p_t
 
         internal static partial void godotsharp_weakref(IntPtr p_obj, out godot_ref r_weak_ref);
 
-        internal static partial void godotsharp_str_to_var(in godot_string p_str, out godot_variant r_ret);
+        internal static partial void godotsharp_str_to_var(in godot_string p_str, godot_bool p_allow_objects, out godot_variant r_ret);
 
         internal static partial void godotsharp_var_to_bytes(in godot_variant p_what, godot_bool p_full_objects,
             out godot_packed_byte_array r_bytes);
 
-        internal static partial void godotsharp_var_to_str(in godot_variant p_var, out godot_string r_ret);
+        internal static partial void godotsharp_var_to_str(in godot_variant p_var, godot_bool p_full_objects, out godot_string r_ret);
 
         internal static partial void godotsharp_err_print_error(in godot_string p_function, in godot_string p_file, int p_line, in godot_string p_error, in godot_string p_message = default, godot_bool p_editor_notify = godot_bool.False, godot_error_handler_type p_type = godot_error_handler_type.ERR_HANDLER_ERROR);
 
diff --git a/modules/mono/glue/runtime_interop.cpp b/modules/mono/glue/runtime_interop.cpp
index b4bbdc7cd14..5cd1e4cddd6 100644
--- a/modules/mono/glue/runtime_interop.cpp
+++ b/modules/mono/glue/runtime_interop.cpp
@@ -1361,21 +1361,21 @@ void godotsharp_err_print_error(const godot_string *p_function, const godot_stri
 			p_editor_notify, p_type);
 }
 
-void godotsharp_var_to_str(const godot_variant *p_var, godot_string *r_ret) {
+void godotsharp_var_to_str(const godot_variant *p_var, bool p_full_objects, godot_string *r_ret) {
 	const Variant &var = *reinterpret_cast<const Variant *>(p_var);
 	String &vars = *memnew_placement(r_ret, String);
-	VariantWriter::write_to_string(var, vars);
+	VariantWriter::write_to_string(var, vars, nullptr, nullptr, p_full_objects);
 }
 
-void godotsharp_str_to_var(const godot_string *p_str, godot_variant *r_ret) {
+void godotsharp_str_to_var(const godot_string *p_str, bool p_allow_objects, godot_variant *r_ret) {
 	Variant ret;
 
 	VariantParser::StreamString ss;
 	ss.s = *reinterpret_cast<const String *>(p_str);
 
 	String errs;
-	int line;
-	Error err = VariantParser::parse(&ss, ret, errs, line);
+	int line = 1;
+	Error err = VariantParser::parse(&ss, ret, errs, line, nullptr, p_allow_objects);
 	if (err != OK) {
 		String err_str = "Parse error at line " + itos(line) + ": " + errs + ".";
 		ERR_PRINT(err_str);
diff --git a/scene/3d/lightmap_gi.cpp b/scene/3d/lightmap_gi.cpp
index f69a5da561a..fc9e11aada6 100644
--- a/scene/3d/lightmap_gi.cpp
+++ b/scene/3d/lightmap_gi.cpp
@@ -1164,7 +1164,7 @@ LightmapGI::BakeError LightmapGI::bake(Node *p_from_node, String p_image_data_pa
 			config.instantiate();
 
 			if (FileAccess::exists(texture_path + ".import")) {
-				config->load(texture_path + ".import");
+				config->load(texture_path + ".import", true);
 			}
 
 			config->set_value("remap", "importer", "2d_array_texture");
@@ -1178,7 +1178,7 @@ LightmapGI::BakeError LightmapGI::bake(Node *p_from_node, String p_image_data_pa
 			config->set_value("params", "slices/horizontal", 1);
 			config->set_value("params", "slices/vertical", texture_slice_count);
 
-			config->save(texture_path + ".import");
+			config->save(texture_path + ".import", true);
 
 			Error err = texture_image->save_exr(texture_path, false);
 			ERR_FAIL_COND_V(err, BAKE_ERROR_CANT_CREATE_IMAGE);
diff --git a/scene/main/window.cpp b/scene/main/window.cpp
index c25c3176546..1cb207b4e85 100644
--- a/scene/main/window.cpp
+++ b/scene/main/window.cpp
@@ -1646,7 +1646,7 @@ void Window::_window_input(const Ref<InputEvent> &p_ev) {
 
 				String errs;
 				int line;
-				VariantParser::parse(&ss, shortcut_var, errs, line);
+				VariantParser::parse(&ss, shortcut_var, errs, line, nullptr, true);
 				debugger_stop_shortcut = shortcut_var;
 			}
 
diff --git a/scene/resources/resource_format_text.cpp b/scene/resources/resource_format_text.cpp
index e286cb87966..cb112dc4b8a 100644
--- a/scene/resources/resource_format_text.cpp
+++ b/scene/resources/resource_format_text.cpp
@@ -277,7 +277,7 @@ Ref<PackedScene> ResourceLoaderText::_parse_node_tag(VariantParser::ResourcePars
 				String assign;
 				Variant value;
 
-				error = VariantParser::parse_tag_assign_eof(&stream, lines, error_text, next_tag, assign, value, &parser);
+				error = VariantParser::parse_tag_assign_eof(&stream, lines, error_text, next_tag, assign, value, &parser, false, true);
 
 				if (error) {
 					if (error == ERR_FILE_MISSING_DEPENDENCIES) {
@@ -360,7 +360,7 @@ Ref<PackedScene> ResourceLoaderText::_parse_node_tag(VariantParser::ResourcePars
 					unbinds,
 					bind_ints);
 
-			error = VariantParser::parse_tag(&stream, lines, error_text, next_tag, &parser);
+			error = VariantParser::parse_tag(&stream, lines, error_text, next_tag, &parser, false, true);
 
 			if (error) {
 				if (error != ERR_FILE_EOF) {
@@ -383,7 +383,7 @@ Ref<PackedScene> ResourceLoaderText::_parse_node_tag(VariantParser::ResourcePars
 
 			packed_scene->get_state()->add_editable_instance(path.simplified());
 
-			error = VariantParser::parse_tag(&stream, lines, error_text, next_tag, &parser);
+			error = VariantParser::parse_tag(&stream, lines, error_text, next_tag, &parser, false, true);
 
 			if (error) {
 				if (error != ERR_FILE_EOF) {
@@ -478,7 +478,7 @@ Error ResourceLoaderText::load() {
 			}
 		}
 
-		error = VariantParser::parse_tag(&stream, lines, error_text, next_tag, &rp);
+		error = VariantParser::parse_tag(&stream, lines, error_text, next_tag, &rp, false, true);
 
 		if (error) {
 			_printerr();
@@ -591,7 +591,7 @@ Error ResourceLoaderText::load() {
 			String assign;
 			Variant value;
 
-			error = VariantParser::parse_tag_assign_eof(&stream, lines, error_text, next_tag, assign, value, &rp);
+			error = VariantParser::parse_tag_assign_eof(&stream, lines, error_text, next_tag, assign, value, &rp, false, true);
 
 			if (error) {
 				_printerr();
@@ -720,7 +720,7 @@ Error ResourceLoaderText::load() {
 			String assign;
 			Variant value;
 
-			error = VariantParser::parse_tag_assign_eof(&stream, lines, error_text, next_tag, assign, value, &rp);
+			error = VariantParser::parse_tag_assign_eof(&stream, lines, error_text, next_tag, assign, value, &rp, false, true);
 
 			if (error) {
 				if (error != ERR_FILE_EOF) {
@@ -923,7 +923,7 @@ void ResourceLoaderText::get_dependencies(Ref<FileAccess> p_f, List<String> *p_d
 
 		p_dependencies->push_back(path);
 
-		Error err = VariantParser::parse_tag(&stream, lines, error_text, next_tag, &rp);
+		Error err = VariantParser::parse_tag(&stream, lines, error_text, next_tag, &rp, false, true);
 
 		if (err) {
 			print_line(error_text + " - " + itos(lines));
@@ -948,7 +948,7 @@ Error ResourceLoaderText::rename_dependencies(Ref<FileAccess> p_f, const String
 	uint64_t tag_end = f->get_position();
 
 	while (true) {
-		Error err = VariantParser::parse_tag(&stream, lines, error_text, next_tag, &rp);
+		Error err = VariantParser::parse_tag(&stream, lines, error_text, next_tag, &rp, false, true);
 
 		if (err != OK) {
 			error = ERR_FILE_CORRUPT;
@@ -1077,7 +1077,7 @@ void ResourceLoaderText::open(Ref<FileAccess> p_f, bool p_skip_first_tag) {
 	resource_current = 0;
 
 	VariantParser::Tag tag;
-	Error err = VariantParser::parse_tag(&stream, lines, error_text, tag);
+	Error err = VariantParser::parse_tag(&stream, lines, error_text, tag, nullptr, false, true);
 
 	if (err) {
 		error = err;
@@ -1134,7 +1134,7 @@ void ResourceLoaderText::open(Ref<FileAccess> p_f, bool p_skip_first_tag) {
 	}
 
 	if (!p_skip_first_tag) {
-		err = VariantParser::parse_tag(&stream, lines, error_text, next_tag, &rp);
+		err = VariantParser::parse_tag(&stream, lines, error_text, next_tag, &rp, false, true);
 
 		if (err) {
 			error_text = "Unexpected end of file";
@@ -1163,7 +1163,7 @@ Error ResourceLoaderText::get_classes_used(HashSet<StringName> *r_classes) {
 	rp_new.userdata = &dummy_read;
 
 	while (next_tag.name == "ext_resource") {
-		error = VariantParser::parse_tag(&stream, lines, error_text, next_tag, &rp_new);
+		error = VariantParser::parse_tag(&stream, lines, error_text, next_tag, &rp_new, false, true);
 
 		if (error) {
 			_printerr();
@@ -1190,7 +1190,7 @@ Error ResourceLoaderText::get_classes_used(HashSet<StringName> *r_classes) {
 			String assign;
 			Variant value;
 
-			error = VariantParser::parse_tag_assign_eof(&stream, lines, error_text, next_tag, assign, value, &rp_new);
+			error = VariantParser::parse_tag_assign_eof(&stream, lines, error_text, next_tag, assign, value, &rp_new, false, true);
 
 			if (error) {
 				if (error == ERR_FILE_EOF) {
@@ -1238,7 +1238,7 @@ Error ResourceLoaderText::get_classes_used(HashSet<StringName> *r_classes) {
 			String assign;
 			Variant value;
 
-			error = VariantParser::parse_tag_assign_eof(&stream, lines, error_text, next_tag, assign, value, &rp_new);
+			error = VariantParser::parse_tag_assign_eof(&stream, lines, error_text, next_tag, assign, value, &rp_new, false, true);
 
 			if (error) {
 				if (error == ERR_FILE_MISSING_DEPENDENCIES) {
@@ -1279,7 +1279,7 @@ String ResourceLoaderText::recognize_script_class(Ref<FileAccess> p_f) {
 	ignore_resource_parsing = true;
 
 	VariantParser::Tag tag;
-	Error err = VariantParser::parse_tag(&stream, lines, error_text, tag);
+	Error err = VariantParser::parse_tag(&stream, lines, error_text, tag, nullptr, false, true);
 
 	if (err) {
 		_printerr();
@@ -1317,7 +1317,7 @@ String ResourceLoaderText::recognize(Ref<FileAccess> p_f) {
 	ignore_resource_parsing = true;
 
 	VariantParser::Tag tag;
-	Error err = VariantParser::parse_tag(&stream, lines, error_text, tag);
+	Error err = VariantParser::parse_tag(&stream, lines, error_text, tag, nullptr, false, true);
 
 	if (err) {
 		_printerr();
@@ -1361,7 +1361,7 @@ ResourceUID::ID ResourceLoaderText::get_uid(Ref<FileAccess> p_f) {
 	ignore_resource_parsing = true;
 
 	VariantParser::Tag tag;
-	Error err = VariantParser::parse_tag(&stream, lines, error_text, tag);
+	Error err = VariantParser::parse_tag(&stream, lines, error_text, tag, nullptr, false, true);
 
 	if (err) {
 		_printerr();
@@ -1947,7 +1947,7 @@ Error ResourceFormatSaverTextInstance::save(const String &p_path, const Ref<Reso
 				}
 
 				String vars;
-				VariantWriter::write_to_string(value, vars, _write_resources, this, use_compat);
+				VariantWriter::write_to_string(value, vars, _write_resources, this, use_compat, true);
 				f->store_string(name.property_name_encode() + " = " + vars + "\n");
 			}
 		}
@@ -2011,14 +2011,14 @@ Error ResourceFormatSaverTextInstance::save(const String &p_path, const Ref<Reso
 			if (!instance_placeholder.is_empty()) {
 				String vars;
 				f->store_string(" instance_placeholder=");
-				VariantWriter::write_to_string(instance_placeholder, vars, _write_resources, this, use_compat);
+				VariantWriter::write_to_string(instance_placeholder, vars, _write_resources, this, use_compat, true);
 				f->store_string(vars);
 			}
 
 			if (instance.is_valid()) {
 				String vars;
 				f->store_string(" instance=");
-				VariantWriter::write_to_string(instance, vars, _write_resources, this, use_compat);
+				VariantWriter::write_to_string(instance, vars, _write_resources, this, use_compat, true);
 				f->store_string(vars);
 			}
 
@@ -2026,7 +2026,7 @@ Error ResourceFormatSaverTextInstance::save(const String &p_path, const Ref<Reso
 
 			for (int j = 0; j < state->get_node_property_count(i); j++) {
 				String vars;
-				VariantWriter::write_to_string(state->get_node_property_value(i, j), vars, _write_resources, this, use_compat);
+				VariantWriter::write_to_string(state->get_node_property_value(i, j), vars, _write_resources, this, use_compat, true);
 
 				f->store_string(String(state->get_node_property_name(i, j)).property_name_encode() + " = " + vars + "\n");
 			}
@@ -2060,7 +2060,7 @@ Error ResourceFormatSaverTextInstance::save(const String &p_path, const Ref<Reso
 			f->store_string(connstr);
 			if (binds.size()) {
 				String vars;
-				VariantWriter::write_to_string(binds, vars, _write_resources, this, use_compat);
+				VariantWriter::write_to_string(binds, vars, _write_resources, this, use_compat, true);
 				f->store_string(" binds= " + vars);
 			}
 
diff --git a/tests/core/io/test_config_file.h b/tests/core/io/test_config_file.h
index 36bfeeacf94..7ad47e03ee3 100644
--- a/tests/core/io/test_config_file.h
+++ b/tests/core/io/test_config_file.h
@@ -117,6 +117,27 @@ antialiasing = false ; Duplicate key.
 			"The configuration file shouldn't parse successfully.");
 }
 
+TEST_CASE("[ConfigFile] Parsing object") {
+	const String config_source = R"(
+[test]
+
+test=Object(RefCounted,"script":null)
+)";
+	ConfigFile config_file;
+
+	ERR_PRINT_OFF;
+	Error error = config_file.parse(config_source);
+	ERR_PRINT_ON;
+
+	CHECK(error == ERR_UNAUTHORIZED);
+	CHECK(!config_file.has_section_key("test", "test"));
+
+	error = config_file.parse(config_source, true);
+
+	CHECK(error == OK);
+	CHECK(config_file.get_value("test", "test").get_type() == Variant::OBJECT);
+}
+
 TEST_CASE("[ConfigFile] Saving file") {
 	ConfigFile config_file;
 	config_file.set_value("player", "name", "Unnamed Player");
diff --git a/tests/core/variant/test_variant.h b/tests/core/variant/test_variant.h
index e3322a1326c..25bc1d12472 100644
--- a/tests/core/variant/test_variant.h
+++ b/tests/core/variant/test_variant.h
@@ -1882,6 +1882,49 @@ TEST_CASE("[Variant] Writer recursive dictionary on keys") {
 }
 #endif
 
+TEST_CASE("[Variant] Writer and parser object") {
+	Ref<RefCounted> ref_counted;
+	ref_counted.instantiate();
+	ref_counted->set_meta("test", 123);
+	const String expected = "Object(RefCounted,\"script\":null,\"metadata/test\":123)\n";
+	String encoded;
+
+	ERR_PRINT_OFF;
+	VariantWriter::write_to_string(ref_counted, encoded);
+	ERR_PRINT_ON;
+
+	CHECK_EQ(encoded, "null");
+
+	encoded.clear();
+	VariantWriter::write_to_string(ref_counted, encoded, nullptr, nullptr, true, true);
+
+	CHECK_EQ(encoded, expected);
+
+	VariantParser::StreamString ss;
+	ss.s = expected;
+	Variant parsed;
+	String errs;
+	int line;
+
+	ERR_PRINT_OFF;
+	Error error = VariantParser::parse(&ss, parsed, errs, line);
+	ERR_PRINT_ON;
+
+	CHECK_EQ(error, ERR_UNAUTHORIZED);
+	CHECK_EQ(parsed, Variant());
+
+	ss = VariantParser::StreamString();
+	ss.s = expected;
+
+	error = VariantParser::parse(&ss, parsed, errs, line, nullptr, true);
+
+	CHECK_EQ(error, OK);
+	ref_counted = parsed;
+	CHECK(ref_counted.is_valid());
+	CHECK_EQ(ref_counted->get_class(), RefCounted::get_class_static());
+	CHECK_EQ(ref_counted->get_meta("test"), Variant(123));
+}
+
 TEST_CASE("[Variant] Basic comparison") {
 	CHECK_EQ(Variant(1), Variant(1));
 	CHECK_FALSE(Variant(1) != Variant(1));