Fabien Potencier dc1db9ef63 Bump version

2026-05-30 19:09:51 +02:00

..

Attribute

…

Cache

…

Error

…

ExpressionParser

Deprecate the fact that the parent, block, and attribute functions are always allowed in a sandboxed template

2026-05-24 21:19:56 +02:00

Extension

Preserve IteratorAggregate identity in sandbox __toString walker

2026-05-29 09:31:03 +02:00

Loader

…

Node

Fix inconsistent array access with a Stringable key

2026-05-29 10:06:57 +02:00

NodeVisitor

Deprecate the fact that the parent, block, and attribute functions are always allowed in a sandboxed template

2026-05-24 21:19:56 +02:00

Profiler

Escape root profile name in HtmlDumper

2026-05-23 09:39:26 +02:00

Resources

Fix sandbox bypass in deprecated internal wrappers

2026-05-24 11:10:36 +02:00

Runtime

…

RuntimeLoader

…

Sandbox

Add a strict mode to SecurityPolicy to opt-in to the 4.0 sandbox behavior for the extends/use tags and the parent/block/attribute functions

2026-05-25 13:40:27 +02:00

Test

…

TokenParser

…

Util

…

AbstractTwigCallable.php

…

Compiler.php

…

DeprecatedCallableInfo.php

…

Environment.php

Bump version

2026-05-30 19:09:51 +02:00

ExpressionParser.php

…

ExtensionSet.php

…

FileExtensionEscapingStrategy.php

…

Lexer.php

…

Markup.php

Add docs on Markup about the goal of this class in the context of a sandbox

2026-05-20 08:14:13 +02:00

NodeTraverser.php

…

OperatorPrecedenceChange.php

…

Parser.php

…

Source.php

…

Template.php

Fix sandbox filter/tag/function allow-list bypass when sandbox state changes between renders

2026-05-27 14:59:42 +02:00

TemplateWrapper.php

…

Token.php

…

TokenStream.php

…

TwigCallableInterface.php

…

TwigFilter.php

…

TwigFunction.php

…

TwigTest.php

…