mirror of
https://github.com/twigphp/Twig.git
synced 2026-09-12 02:16:41 +00:00
Update CHANGELOG
This commit is contained in:
@@ -1,5 +1,9 @@
|
||||
# 3.15.0 (2024-XX-XX)
|
||||
|
||||
* [BC BREAK] Fix a security issue in the sandbox mode allowing an attacker to call attributes on Array-like objects
|
||||
They are now checked via the property policy
|
||||
* Fix a security issue in the sandbox mode allowing an attacker to be able to call `toString()`
|
||||
under some circumstances on an object even if the `__toString()` method is not allowed by the security policy
|
||||
* Add Spanish inflector support for the `plural` and `singular` filters in the String extension
|
||||
* Deprecate `TempNameExpression` in favor of `LocalVariable`
|
||||
* Deprecate `NameExpression` in favor of `ContextVariable`
|
||||
|
||||
Reference in New Issue
Block a user