9d2d35faa7
Make extra integration tests compatible with Twig 4
2026-09-06 22:35:36 +02:00
9c6d76b61c
Add void return type hint even in tests
2026-07-12 13:43:08 +02:00
e36489d352
Pre-escape HTML input on inline_css and inky_to_html filters
...
Both filters consume HTML on the input side. Adding `pre_escape => 'html'`
makes the autoescaper escape attacker-controlled inputs before the filters
process them, so they are no longer reachable via `{{ user_input|inline_css }}`
or `{{ user_input|inky_to_html }}` without an explicit `|raw`.
2026-05-15 15:14:14 +02:00
84982072c7
Fix XSS by adjusting is_safe annotation on HTML-emitting filters
...
The `html_to_markdown` filter emits plain Markdown text, so the
`is_safe` annotation is dropped entirely and autoescape now handles
its output according to the surrounding context.
The `markdown_to_html` and `inline_css` filters emit HTML, not text
safe in every escaping context, so `is_safe => ['all']` produced
unescaped HTML when their output was interpolated into a JS, CSS or
URL context. The annotation is now `is_safe => ['html']`.
2026-05-15 15:14:02 +02:00
ff327e4163
Add .gitignore & .gitattributes to all .gitattributes
2025-12-02 15:45:16 +01:00
85a4817128
CS fixes
2025-07-29 10:07:07 +02:00
dc6356268b
Bump min PHP version to 8.1
2025-01-31 21:45:36 +01:00
18f4203827
Prepare IntegrationTestCase for static data providers
2024-09-03 15:08:40 +02:00
976cea0403
Fix tests
2024-09-01 22:54:59 +02:00
031c7bda4d
Allow extra extensions to use Twig 4
2024-09-01 22:39:12 +02:00
2511b658da
Fix tests
2024-08-26 17:29:01 +02:00
c070cd719c
Drop support for 8.0
2024-08-10 12:32:24 +02:00
b78dee8682
Update PHPUnit config
2024-06-21 08:22:31 +02:00
761aa56a6f
Revert "minor #4042 Auto-close PRs on subtree-splits (kbond)"
...
This reverts commit 12625c0c05ad934312cd
2024-05-11 09:35:57 +02:00
b212f1bb2f
Auto-close PRs on subtree-splits
2024-04-19 08:34:22 +02:00
aa7c454e2d
Fix CS
2023-12-10 20:34:32 +01:00
bff189f19a
Move functions for CssInlinerExtension
2023-12-09 18:39:03 +01:00
fdb9d9eddf
Bump dependencies
2023-11-21 15:02:01 +01:00
b8b0c39663
allow Symfony 7 packages to be installed
2023-09-11 13:25:50 +02:00
fa5f1d4c2e
Merge branch '2.x' into 3.x
...
* 2.x:
Bump min deps
2023-07-29 17:34:56 +02:00
c12990f9e7
Bump min deps
2023-07-29 13:31:08 +02:00
08d2037f26
Bump version to 3.6
2023-02-09 07:45:16 +01:00
4650d37fb2
Merge branch '2.x' into 3.x
...
* 2.x:
Fix LICENSE year
2023-02-08 08:44:55 +01:00
872646a70f
Fix LICENSE year
2023-02-08 08:44:48 +01:00
0cfb6f55e9
Merge branch '2.x' into 3.x
...
* 2.x:
Bump LICENSE year
Bump version
Prepare the 2.15.4 release
2023-01-01 09:43:26 +01:00
eb8bde3c41
Bump LICENSE year
2023-01-01 09:42:51 +01:00
0c8f5b2ea4
Bump version to 3.5
2022-12-27 13:23:36 +01:00
5aad8295af
Merge branch '2.x' into 3.x
...
* 2.x:
Bump license year
Typo fix : "flexiblity" ➤ "flexibility"
allow translation-contracts:^3
2022-01-02 11:02:25 +01:00
ce97157b43
Bump license year
2022-01-02 11:02:19 +01:00
33ed3b7e33
Merge branch '2.x' into 3.x
...
* 2.x:
Upgrade to version 4.4 lts at least
2021-11-13 17:20:21 +01:00
315e16f5df
Upgrade to version 4.4 lts at least
2021-11-08 13:29:10 +01:00
1e53d27a37
Merge branch '2.x' into 3.x
...
* 2.x:
Allow Symfony 6
2021-05-20 16:28:34 +02:00
ea5de7e626
Allow Symfony 6
2021-05-20 16:22:31 +02:00
cb88e0a68c
Merge branch '2.x' into 3.x
...
* 2.x:
Move things around
2021-01-01 15:58:18 +01:00
1868918724
Move things around
2021-01-01 15:53:48 +01:00
b0afeb512e
Merge branch '2.x' into 3.x
...
* 2.x:
Move Extra Bundle config from XML to PHP
bump license year
2021-01-01 15:33:39 +01:00
bed8f31b96
bump license year
2021-01-01 10:21:03 +01:00
351a97ed15
Fix Composer version
2021-01-01 10:05:00 +01:00
dae3868f04
Fix Composer version
2021-01-01 10:02:52 +01:00
4e0008cd82
Try running all tests on nightly
2020-05-21 11:54:27 +02:00
74f3ffe4b6
Fix extra package deps
2020-05-21 08:01:43 +02:00
9270d3e0e0
Allow dev versions
2020-05-19 15:17:30 +02:00
2d58a54b4a
Allow PHP 8 for extra packages
2020-05-19 15:12:25 +02:00
6aae22ecde
Bump license year
2020-01-01 18:10:47 +01:00
966fa45126
Fix constraints
2019-12-27 08:33:44 +01:00
5cde1f50bb
Update .gitattributes to remove tests from \"dist\"
2019-10-17 09:27:07 +02:00
9f9a2088a7
Renamed inky to inky_to_html
2019-09-07 08:57:51 +02:00
37ed0436dd
added the cssinliner and inky extensions
2019-08-11 12:14:28 +02:00
Fabien Potencier
Nicolas Grekas
jmsche
Alexander M. Turek
Kevin Bond
Christian Flothmann
noniagriconomie
abdounikarim
Barry vd. Heuvel