Nicolas Grekas
85a4817128
CS fixes
2025-07-29 10:07:07 +02:00
Fabien Potencier
76062c8d51
Fix CS
2025-01-19 16:54:05 +01:00
Nicolas Grekas
d72ae2447e
Merge branch '3.14.x' into 3.x
...
* 3.14.x:
Improve detection of recursion
Fix recursion when arrays contain self-references in sandboxed mode
Fix code
Prepare the 3.11.2 release
Update CHANGELOG
Sandbox ArrayAccess and do sandbox checks before isset() checks
Fix sandbox handling for __toString()
Prepare the 3.14.1 release
Update CHANGELOG
Sandbox ArrayAccess and do sandbox checks before isset() checks
Fix sandbox handling for __toString()
Prepare the 3.11.1 release
Fix a security issue when an included sandboxed template has been loaded before without the sandbox context
2024-11-07 11:17:57 +01:00
Nicolas Grekas
83a21d31e5
Merge branch '3.11.x' into 3.14.x
...
* 3.11.x:
Improve detection of recursion
Fix recursion when arrays contain self-references in sandboxed mode
Fix code
Prepare the 3.11.2 release
Update CHANGELOG
Sandbox ArrayAccess and do sandbox checks before isset() checks
Fix sandbox handling for __toString()
Prepare the 3.11.1 release
Fix a security issue when an included sandboxed template has been loaded before without the sandbox context
2024-11-07 11:11:36 +01:00
Lee Rowlands
a0f775683d
Fix recursion when arrays contain self-references in sandboxed mode
2024-11-07 09:42:22 +01:00
Nicolas Grekas
b957e5a44c
Sandbox ArrayAccess and do sandbox checks before isset() checks
2024-11-06 21:41:25 +01:00
Fabien Potencier
d4a302681b
Fix sandbox handling for __toString()
2024-11-06 21:35:53 +01:00
Nicolas Grekas
ec39a9dccc
Sandbox ArrayAccess and do sandbox checks before isset() checks
2024-11-06 19:48:59 +01:00
Fabien Potencier
cafc608ece
Fix sandbox handling for __toString()
2024-11-06 19:27:48 +01:00
Nicolas Grekas
831c148e78
Sandbox ArrayAccess and do sandbox checks before isset() checks
2024-11-06 19:16:07 +01:00
Fabien Potencier
2bb8c2460a
Fix sandbox handling for __toString()
2024-11-05 17:54:37 +01:00
Fabien Potencier
9369a48c53
Deprecate the sandbox tag
2024-09-10 22:41:00 +02:00
Fabien Potencier
2ae0c0d38c
Fix CS
2024-09-06 12:33:38 +02:00
Alexandre Daubois
797e490356
Improve exception expectations reliability
2024-09-04 15:22:48 +02:00
Alexander M. Turek
6ddb76bb76
Make data providers static
2024-09-03 16:32:00 +02:00
Christian Flothmann
8663ec242b
fix typo
2024-08-28 14:18:47 +02:00
Fabien Potencier
5fca700cbd
Deprecate the fact that the extends and use tags are always allowed in a sandboxed template
2024-08-28 13:40:53 +02:00
Fabien Potencier
e6a98a000f
Fix test without any assertions
2023-12-20 20:34:04 +01:00
Fabien Potencier
fca89954f1
Simplify tests
2023-12-20 20:34:04 +01:00
Fabien Potencier
204cd6f412
Merge branch '2.x' into 3.x
...
* 2.x:
Add SourcePolicyInterface to selectively enable the Sandbox based on a template's Source
2023-12-19 08:19:15 +01:00
Yaakov Saxon
a18da1614a
Add SourcePolicyInterface to selectively enable the Sandbox based on a template's Source
2023-12-19 08:18:35 +01:00
Yaakov Saxon
62732646c8
Minor rename of SandboxTest functions->methods
2023-10-27 12:15:56 -04:00
Yaakov Saxon
5e1838dbca
Fix premature loop exit in Security Policy lookup of allowed methods/properties
2023-10-26 17:37:13 -07:00
Fabien Potencier
2eb3308055
Disallow non closures in sort filter when the sanbox mode is enabled
2022-02-04 07:52:21 +01:00
Fabien Potencier
497f027cd4
Merge branch '1.x' into 2.x
...
* 1.x:
Fix "include(template_from_string())"
Fix PHPUnit config
2020-10-27 15:14:55 +01:00
Fabien Potencier
df9c9f2165
Fix "include(template_from_string())"
2020-10-27 13:39:31 +01:00
Fabien Potencier
ab6695b580
Merge branch '1.x' into 2.x
...
* 1.x:
Fix sandbox support when using include(template_from_string())
Add test to verify that filter is not working when template_from_string is used.
In |filter(), |map(), and |reduce(), throw a RuntimeError instead of a TypeError
2020-08-23 17:55:14 +02:00
Fabien Potencier
c7be1bb3c4
Fix sandbox support when using include(template_from_string())
2020-08-23 17:48:34 +02:00
Bozhidar Hristov
04431228af
Add test to verify that filter is not working when template_from_string is used.
2020-08-23 17:46:12 +02:00
Fabien Potencier
9bf49d5ccf
Merge branch '1.x' into 2.x
...
* 1.x:
Update CHANGELOG
Fix previous merge
Make round brackets optional for one argument tests like sameas
2020-08-23 14:22:09 +02:00
Andreas
1ee72d9e15
Make round brackets optional for one argument tests like sameas
2020-08-23 14:16:31 +02:00
Fabien Potencier
81612a5c7d
Merge branch '1.x' into 2.x
...
* 1.x:
Fix CS
2020-08-23 13:49:18 +02:00
Fabien Potencier
bde54e11b8
Fix CS
2020-08-23 13:48:32 +02:00
Fabien Potencier
38bd74d03a
Merge branch '1.x' into 2.x
...
* 1.x:
Add a test
fix typo in ApplyTokenParser PHP doc
Fixes #3351
2020-08-05 16:53:59 +02:00
Bozhidar Hristov
04658c9f59
Fixes #3351
2020-07-09 14:43:36 +02:00
Fabien Potencier
d190c2e7f7
Merge branch '1.x' into 2.x
...
* 1.x:
Restrict callables to closures in filters
2020-07-05 15:32:43 +02:00
Jérémy Derussé
d8259519c0
Restrict callables to closures in filters
2020-07-05 15:30:15 +02:00
Nicolas Grekas
791f001ae6
Merge branch '1.x' into 2.x
...
* 1.x:
Minor fixes
2020-05-21 11:15:20 +02:00
Nicolas Grekas
5dc364469b
Minor fixes
2020-05-21 11:01:36 +02:00
Nicolas Grekas
b845ed969e
Twig 2 is compatible with PHP 7.0
2019-09-20 15:13:40 +02:00
Jérémy Derussé
f348f6ea64
Fix compatibility with PHPUnit 8
2019-08-08 11:06:58 +02:00
Fabien Potencier
5ebcecf24b
Fix PHPUnit deprecations
2019-08-08 11:03:05 +02:00
Fabien Potencier
c829dafd75
Merge branch '1.x' into 2.x
...
* 1.x:
Update to PhpUnitBridge and fix deprecations
2019-08-08 10:19:01 +02:00
Jérémy Derussé
b776e41f5a
Update to PhpUnitBridge and fix deprecations
2019-08-08 09:39:49 +02:00
Fabien Potencier
1e3bb75010
moved test under tests/
2019-06-30 14:51:54 +02:00
Fabien Potencier
22a1317249
moved tests under tests/
2019-06-30 14:48:27 +02:00