Fabien Potencier 23eb6eb126 Fix sandbox filter/tag/function allow-list bypass when sandbox state changes between renders

2026-05-27 14:59:42 +02:00

..

Expression

Fix sandbox __toString policy bypass via dynamic mapping keys

2026-05-27 14:54:34 +02:00

AutoEscapeNode.php

…

BlockNode.php

…

BlockReferenceNode.php

…

BodyNode.php

…

CaptureNode.php

…

CheckSecurityCallNode.php

Fix sandbox filter/tag/function allow-list bypass when sandbox state changes between renders

2026-05-27 14:59:42 +02:00

CheckSecurityNode.php

Fix sandbox filter/tag/function allow-list bypass when sandbox state changes between renders

2026-05-27 14:59:42 +02:00

CheckToStringNode.php

Fix sandbox __toString bypasses

2026-05-20 00:18:59 +02:00

CoercesChildrenToStringInterface.php

Fix sandbox __toString bypasses

2026-05-20 00:18:59 +02:00

DeprecatedNode.php

Fix sandbox __toString bypasses

2026-05-20 00:18:59 +02:00

DoNode.php

…

EmbedNode.php

Compile 'index' with repr (not string) in EmbedNode

2025-09-25 08:28:51 +02:00

EmptyNode.php

…

FlushNode.php

…

ForElseNode.php

…

ForLoopNode.php

…

ForNode.php

…

IfNode.php

Fix testing and expression when it evaluates to an instance of Markup

2025-02-21 18:29:32 +01:00

ImportNode.php

Fix sandbox __toString bypasses

2026-05-20 00:18:59 +02:00

IncludeNode.php

Fix sandbox filter/tag/function allow-list bypass when sandbox state changes between renders

2026-05-27 14:59:42 +02:00

MacroNode.php

…

ModuleNode.php

Fix sandbox __toString bypasses

2026-05-20 00:18:59 +02:00

NameDeprecation.php

…

Node.php

Fix CS

2025-02-14 12:57:03 +01:00

NodeCaptureInterface.php

…

NodeOutputInterface.php

…

Nodes.php

…

PrintNode.php

Fix sandbox __toString bypasses

2026-05-20 00:18:59 +02:00

SandboxNode.php

…

SetNode.php

Fix CS

2025-02-14 12:57:03 +01:00

TextNode.php

…

TypesNode.php

CS fixes

2025-07-29 10:07:07 +02:00

WithNode.php

…