85a4817128
CS fixes
2025-07-29 10:07:07 +02:00
5886907b28
Create attributes AsTwigFilter, AsTwigFunction and AsTwigTest to ease extension development
2025-03-24 22:34:21 +01:00
76062c8d51
Fix CS
2025-01-19 16:54:05 +01:00
d8fe3bd1ec
Add LastModifiedExtensionInterface and implementation in AbstractExtension to track modification of runtime classes
2025-01-02 14:50:18 +01:00
d72ae2447e
Merge branch '3.14.x' into 3.x
...
* 3.14.x:
Improve detection of recursion
Fix recursion when arrays contain self-references in sandboxed mode
Fix code
Prepare the 3.11.2 release
Update CHANGELOG
Sandbox ArrayAccess and do sandbox checks before isset() checks
Fix sandbox handling for __toString()
Prepare the 3.14.1 release
Update CHANGELOG
Sandbox ArrayAccess and do sandbox checks before isset() checks
Fix sandbox handling for __toString()
Prepare the 3.11.1 release
Fix a security issue when an included sandboxed template has been loaded before without the sandbox context
2024-11-07 11:17:57 +01:00
83a21d31e5
Merge branch '3.11.x' into 3.14.x
...
* 3.11.x:
Improve detection of recursion
Fix recursion when arrays contain self-references in sandboxed mode
Fix code
Prepare the 3.11.2 release
Update CHANGELOG
Sandbox ArrayAccess and do sandbox checks before isset() checks
Fix sandbox handling for __toString()
Prepare the 3.11.1 release
Fix a security issue when an included sandboxed template has been loaded before without the sandbox context
2024-11-07 11:11:36 +01:00
a0f775683d
Fix recursion when arrays contain self-references in sandboxed mode
2024-11-07 09:42:22 +01:00
b957e5a44c
Sandbox ArrayAccess and do sandbox checks before isset() checks
2024-11-06 21:41:25 +01:00
d4a302681b
Fix sandbox handling for __toString()
2024-11-06 21:35:53 +01:00
5b580ec188
Fix code
2024-11-06 19:50:16 +01:00
ec39a9dccc
Sandbox ArrayAccess and do sandbox checks before isset() checks
2024-11-06 19:48:59 +01:00
cafc608ece
Fix sandbox handling for __toString()
2024-11-06 19:27:48 +01:00
831c148e78
Sandbox ArrayAccess and do sandbox checks before isset() checks
2024-11-06 19:16:07 +01:00
2bb8c2460a
Fix sandbox handling for __toString()
2024-11-05 17:54:37 +01:00
9369a48c53
Deprecate the sandbox tag
2024-09-10 22:41:00 +02:00
41103dcdc2
Fix a security issue when an included sandboxed template has been loaded before without the sandbox context
2024-09-10 12:40:14 +02:00
11f68e2aeb
Fix a security issue when an included sandboxed template has been loaded before without the sandbox context
2024-09-09 19:04:10 +02:00
2ae0c0d38c
Fix CS
2024-09-06 12:33:38 +02:00
797e490356
Improve exception expectations reliability
2024-09-04 15:22:48 +02:00
6ddb76bb76
Make data providers static
2024-09-03 16:32:00 +02:00
a39b6e164c
minor #4241 Adjust cycle implementation (smnandre)
...
This PR was squashed before being merged into the 3.x branch.
Discussion
----------
Adjust `cycle` implementation
Update code following [#4158 ](https://github.com/twigphp/Twig/issues/4158 )
* return mixed
* trigger when non countable
* type the position argument
Add doc precisions
Commits
-------
7c3c1615
2024-08-30 20:43:09 +02:00
7c3c16154e
Adjust cycle implementation
2024-08-30 20:43:06 +02:00
8663ec242b
fix typo
2024-08-28 14:18:47 +02:00
5fca700cbd
Deprecate the fact that the extends and use tags are always allowed in a sandboxed template
2024-08-28 13:40:53 +02:00
e4e95f5b86
Replace template loader mocks by ArrayLoader
2024-07-24 08:27:23 +02:00
b63bde3063
Optimize sprintf() calls for PHP 8.4
2024-06-21 08:16:55 +02:00
04b1ad3ced
Fix old escaper signature + add docs
2024-05-13 18:21:17 +02:00
1953f77844
Fix BC break on escaper extension
2024-05-11 21:02:20 +02:00
f2c9795b26
Fix EscaperExtension constructor to not change from previous releases (will be the same in 4.x as well)
2024-05-04 18:27:46 +02:00
59542c3caf
Fix wrong tests
2024-05-04 08:32:54 +02:00
c63f695e8a
Add needs_charset option for filters and functions
2024-05-01 13:12:48 +02:00
16acdf69fe
Rename some internal methods
2024-05-01 10:19:22 +02:00
84bff0643c
Extract the escaping logic to a runtime
2024-04-28 21:26:07 +02:00
5148d10515
Fix some inconsistencies
2024-04-28 13:15:26 +02:00
a71ae1923e
Use ::class everywhere
2024-04-19 10:26:00 -04:00
e6a98a000f
Fix test without any assertions
2023-12-20 20:34:04 +01:00
fca89954f1
Simplify tests
2023-12-20 20:34:04 +01:00
204cd6f412
Merge branch '2.x' into 3.x
...
* 2.x:
Add SourcePolicyInterface to selectively enable the Sandbox based on a template's Source
2023-12-19 08:19:15 +01:00
a18da1614a
Add SourcePolicyInterface to selectively enable the Sandbox based on a template's Source
2023-12-19 08:18:35 +01:00
54d34b969b
Move functions for CoreExtension
2023-12-10 20:13:10 +01:00
72071e8ece
Move functions for EscaperExtension
2023-12-10 11:49:57 +01:00
196e91dd72
Move functions for StringLoaderExtension
2023-12-10 11:38:36 +01:00
d4d016034c
Move functions for DebugExtension
2023-12-10 11:35:00 +01:00
2f73ee35ca
minor #3900 Minor rename of Sandbox test: functions->methods (YSaxon)
...
This PR was merged into the 3.x branch.
Discussion
----------
Minor rename of Sandbox test: functions->methods
Commits
-------
62732646
2023-11-21 17:18:42 +01:00
62732646c8
Minor rename of SandboxTest functions->methods
2023-10-27 12:15:56 -04:00
248855b34b
Merge branch '2.x' into 3.x
...
* 2.x:
Fix premature loop exit in Security Policy lookup of allowed methods/properties
2023-10-26 17:38:13 -07:00
5e1838dbca
Fix premature loop exit in Security Policy lookup of allowed methods/properties
2023-10-26 17:37:13 -07:00
5193653ecb
Fix CS
2023-10-08 09:05:22 +02:00
d6f9a4e7a2
Merge branch '2.x' into 3.x
...
* 2.x:
Fix custom escapers when using multiple Twig environments
Rename variable
2022-03-25 09:06:57 +01:00
9c03ef0d21
Fix custom escapers when using multiple Twig environments
2022-03-25 08:56:44 +01:00
Nicolas Grekas
Jérôme Tamarelle
Fabien Potencier
Lee Rowlands
Alexandre Daubois
Alexander M. Turek
Simon André
Christian Flothmann
Yaakov Saxon