Update CHANGELOG

This commit is contained in:
Fabien Potencier
2024-11-06 18:45:40 +01:00
parent b957e5a44c
commit cf5d4e3bc8
+4
View File
@@ -1,5 +1,9 @@
# 3.15.0 (2024-XX-XX)
* [BC BREAK] Fix a security issue in the sandbox mode allowing an attacker to call attributes on Array-like objects
They are now checked via the property policy
* Fix a security issue in the sandbox mode allowing an attacker to be able to call `toString()`
under some circumstances on an object even if the `__toString()` method is not allowed by the security policy
* Add Spanish inflector support for the `plural` and `singular` filters in the String extension
* Deprecate `TempNameExpression` in favor of `LocalVariable`
* Deprecate `NameExpression` in favor of `ContextVariable`