Alexandre Daubois 324fa60545 Fix sandbox bypass: PHP code injection via _self / import macro reference

2026-05-19 23:41:59 +02:00

..

Cache

CS fixes

2025-07-29 10:07:07 +02:00

Extension

Fix sandbox bypass: PHP code injection via _self / import macro reference

2026-05-19 23:41:59 +02:00

Fixtures

Add html_attr_relaxed escaping strategy

2026-02-08 18:59:07 +01:00

Loader

CS fixes

2025-07-29 10:07:07 +02:00

Node

Fix sandbox bypass: PHP code injection via {% use %} template name

2026-05-19 22:50:45 +02:00

NodeVisitor

CS fixes

2025-07-29 10:07:07 +02:00

Profiler

Fix CS

2026-02-07 09:07:38 +01:00

Resources

Fix sandbox bypass: propagate sandbox state to checkArrow for source-policy sandboxing

2026-05-16 18:56:08 +01:00

Runtime

Add html_attr_relaxed escaping strategy

2026-02-08 18:59:07 +01:00

TokenParser

Fix CS

2026-02-07 09:07:38 +01:00

Util

CS fixes

2025-07-29 10:07:07 +02:00

CompilerTest.php

Encode single quotes as \x27 in Compiler::string()

2026-05-19 22:58:27 +02:00

ContainerRuntimeLoaderTest.php

CS fixes

2025-07-29 10:07:07 +02:00

CustomExtensionTest.php

CS fixes

2025-07-29 10:07:07 +02:00

DeprecatedCallableInfoTest.php

Fix CS

2026-02-07 09:07:38 +01:00

drupal_test.sh

…

DummyBackedEnum.php

CS fixes

2025-07-29 10:07:07 +02:00

DummyUnitEnum.php

CS fixes

2025-07-29 10:07:07 +02:00

EnvironmentTest.php

Fix CS

2026-02-07 09:07:38 +01:00

ErrorTest.php

CS fixes

2025-07-29 10:07:07 +02:00

ExpressionParserTest.php

Add getOperatorTokens() to ExpressionParserInterface to separate operator token registration from parser identity

2026-02-24 21:13:06 +01:00

FactoryRuntimeLoaderTest.php

CS fixes

2025-07-29 10:07:07 +02:00

FileExtensionEscapingStrategyTest.php

CS fixes

2025-07-29 10:07:07 +02:00

FilesystemHelper.php

CS fixes

2025-07-29 10:07:07 +02:00

IntegrationTest.php

Fix CS

2026-02-07 09:07:38 +01:00

LexerTest.php

Add getOperatorTokens() to ExpressionParserInterface to separate operator token registration from parser identity

2026-02-24 21:13:06 +01:00

ParserTest.php

Make embeds deterministic

2026-05-16 09:48:23 +01:00

TemplateTest.php

Fix null coalescing operator with imported macros

2026-02-25 08:38:54 +01:00

TemplateWrapperTest.php

CS fixes

2025-07-29 10:07:07 +02:00

TokenStreamTest.php

CS fixes

2025-07-29 10:07:07 +02:00