6 Commits

Author	SHA1	Message	Date
Fabien Potencier	be36fee09e	Rename macro variable AST nodes	2026-07-28 11:53:50 +02:00
Fabien Potencier	87093aab9e	Allow calling a macro with a dynamic name via the dot operator	2026-06-06 17:10:52 +02:00
Fabien Potencier	ea3f7a2844	Validate macro name in MacroReferenceExpression constructor ... The name passed to MacroReferenceExpression is emitted as raw PHP in compile() via "->{$name}(...)". Callers were expected to validate the name, but a missing check led to CVE-2026-XXXXX (PHP code injection via _self / import macro reference): defense-in-depth, validate the name in the constructor so the class is safe by construction.	2026-05-19 23:42:31 +02:00
Fabien Potencier	efa004caab	Fix null coalescing operator with imported macros	2026-02-25 08:38:54 +01:00
Fabien Potencier	2d84abfd08	Make the defined test implementation more generic	2025-02-21 08:36:21 +01:00
Fabien Potencier	1105964873	Rework macros handling	2024-10-20 21:53:20 +02:00