geckon01/Twig
1
0
Fork 0
mirror of https://github.com/twigphp/Twig.git synced 2026-11-01 00:25:57 +00:00
Code Issues Packages Projects Releases Wiki Activity
7,738 Commits 29 Branches 275 Tags
intl-prototype-pattern
Commit Graph

5 Commits

Author SHA1 Message Date
Nicolas Grekas e36489d352 Pre-escape HTML input on inline_css and inky_to_html filters 
Both filters consume HTML on the input side. Adding `pre_escape => 'html'`
makes the autoescaper escape attacker-controlled inputs before the filters
process them, so they are no longer reachable via `{{ user_input|inline_css }}`
or `{{ user_input|inky_to_html }}` without an explicit `|raw`.
 2026-05-15 15:14:14 +02:00
Nicolas Grekas 85a4817128 CS fixes 2025-07-29 10:07:07 +02:00
Fabien Potencier 976cea0403 Fix tests 2024-09-01 22:54:59 +02:00
Fabien Potencier e07e9b5be3 Move functions for InkyExtension 2023-12-09 18:39:03 +01:00
Fabien Potencier 1868918724 Move things around 2021-01-01 15:53:48 +01:00