geckon01/Twig
1
0
Fork 0
mirror of https://github.com/twigphp/Twig.git synced 2026-08-26 15:06:42 +00:00
Code Issues Packages Projects Releases Wiki Activity
7,528 Commits 7 Branches 273 Tags
8a4b77920a8ef2c73078df72752e0ff12c0f9b4e
Commit Graph

2 Commits

Author SHA1 Message Date
Fabien Potencier 8a4b77920a Add PHPUnit attributes alongside annotations to silence doc-comment metadata deprecations on PHPUnit 11 2026-06-03 18:26:39 +02:00
Fabien Potencier ea3f7a2844 Validate macro name in MacroReferenceExpression constructor 
The name passed to MacroReferenceExpression is emitted as raw PHP in
compile() via "->{$name}(...)". Callers were expected to validate
the name, but a missing check led to CVE-2026-XXXXX (PHP code injection
via _self / import macro reference): defense-in-depth, validate the
name in the constructor so the class is safe by construction.
 2026-05-19 23:42:31 +02:00