Fabien Potencier 2d75c87d05 Add an always_allowed_in_sandbox flag for filters, functions, and tags

2026-06-06 08:56:58 +02:00

..

Attribute

Add an always_allowed_in_sandbox flag for filters, functions, and tags

2026-06-06 08:56:58 +02:00

Cache

…

Error

Report columns in syntax errors

2026-06-05 20:28:45 +02:00

ExpressionParser

Add an always_allowed_in_sandbox flag for filters, functions, and tags

2026-06-06 08:56:58 +02:00

Extension

Add an always_allowed_in_sandbox flag for filters, functions, and tags

2026-06-06 08:56:58 +02:00

Loader

…

Node

Skip the string cast in PrintNode when the expression is already a string and add tests

2026-06-03 19:56:27 +02:00

NodeVisitor

Add an always_allowed_in_sandbox flag for filters, functions, and tags

2026-06-06 08:56:58 +02:00

Profiler

Escape root profile name in HtmlDumper

2026-05-23 09:39:26 +02:00

Resources

Fix sandbox bypass in deprecated internal wrappers

2026-05-24 11:10:36 +02:00

Runtime

…

RuntimeLoader

…

Sandbox

Add a strict mode to SecurityPolicy to opt-in to the 4.0 sandbox behavior for the extends/use tags and the parent/block/attribute functions

2026-05-25 13:40:27 +02:00

Test

Stop reporting a skipped test in IntegrationTestCase when there is no legacy test to run

2026-06-03 20:07:23 +02:00

TokenParser

Add an always_allowed_in_sandbox flag for filters, functions, and tags

2026-06-06 08:56:58 +02:00

Util

Skip the sandbox __toString check on arguments whose PHP parameter type cannot implicitly coerce to string

2026-06-02 13:58:24 +02:00

AbstractTwigCallable.php

Add an always_allowed_in_sandbox flag for filters, functions, and tags

2026-06-06 08:56:58 +02:00

Compiler.php

…

DeprecatedCallableInfo.php

…

Environment.php

Track the source offset of each token

2026-06-05 20:28:45 +02:00

ExpressionParser.php

…

ExtensionSet.php

…

FileExtensionEscapingStrategy.php

…

Lexer.php

Avoid allocating a normalized copy when counting newlines without carriage returns

2026-06-05 20:33:28 +02:00

Markup.php

…

NodeTraverser.php

…

OperatorPrecedenceChange.php

…

Parser.php

…

Source.php

Report columns in syntax errors

2026-06-05 20:28:45 +02:00

Template.php

Fix nested block() resolution when a directly rendered block calls parent()

2026-06-03 22:09:09 +02:00

TemplateWrapper.php

…

Token.php

Track the source offset of each token

2026-06-05 20:28:45 +02:00

TokenStream.php

Report columns in syntax errors

2026-06-05 20:28:45 +02:00

TwigCallableInterface.php

Add an always_allowed_in_sandbox flag for filters, functions, and tags

2026-06-06 08:56:58 +02:00

TwigFilter.php

…

TwigFunction.php

…

TwigTest.php

…