b762bc94b9
Make the sandbox a first-class citizen with a dedicated Sandbox class
2026-07-30 12:05:47 +02:00
222a7f3f9a
Clarify the security scope for untrusted templates
2026-07-28 08:40:21 +02:00
29b66fd916
Document sandbox handling of magic __call() methods
2026-07-12 15:45:50 +02:00
416d07da1d
Add an allow-list for tests to the sandbox security policy
2026-06-06 11:08:56 +02:00
cf4b50d181
Clarify sandbox always-allowed trust boundary
2026-06-06 09:19:48 +02:00
29c4325afd
Bump version to 3.28.0 for the always_allowed_in_sandbox feature
2026-06-06 08:56:59 +02:00
7fd87a381f
Document the criteria for always-allowed sandbox items and list 4.0 built-ins
2026-06-06 08:56:58 +02:00
2d75c87d05
Add an always_allowed_in_sandbox flag for filters, functions, and tags
2026-06-06 08:56:58 +02:00
af7bf5e181
Add a strict mode to SecurityPolicy to opt-in to the 4.0 sandbox behavior for the extends/use tags and the parent/block/attribute functions
2026-05-25 13:40:27 +02:00
461143d700
Document transitive behavior of allowed sandbox operations
2026-05-25 08:36:20 +02:00
6bfa285e2f
Document that the sandbox doesn't protect against resource exhaustion
2026-05-20 09:12:32 +02:00
71f83ecd0e
Tweak Sandbox docs
2025-02-28 07:30:52 +01:00
03792f643f
Use .html.twig file extension in documentation instead of .html
2024-12-18 11:01:27 +01:00
d72ae2447e
Merge branch '3.14.x' into 3.x
...
* 3.14.x:
Improve detection of recursion
Fix recursion when arrays contain self-references in sandboxed mode
Fix code
Prepare the 3.11.2 release
Update CHANGELOG
Sandbox ArrayAccess and do sandbox checks before isset() checks
Fix sandbox handling for __toString()
Prepare the 3.14.1 release
Update CHANGELOG
Sandbox ArrayAccess and do sandbox checks before isset() checks
Fix sandbox handling for __toString()
Prepare the 3.11.1 release
Fix a security issue when an included sandboxed template has been loaded before without the sandbox context
2024-11-07 11:17:57 +01:00
b957e5a44c
Sandbox ArrayAccess and do sandbox checks before isset() checks
2024-11-06 21:41:25 +01:00
6688a8df16
Move sandbox docs to its own chapter in the docs
2024-10-04 21:00:19 +02:00
Fabien Potencier
Pepperoni1337
Nicolas Grekas