Fabien Potencier 9fcf6906d7 security #552 Fix sandbox __toString policy bypass via dynamic mapping keys (fabpot)
This PR was squashed before being merged into the twig-3.x branch.

Discussion
----------

Fix sandbox __toString policy bypass via dynamic mapping keys

Fixes #548

Fixing this one introduces a new feature that I've decided to "keep" and document :)

Commits
-------

635cea4789 Document new support for any expression as a dynamic mapping key
9ff4101463 Fix sandbox __toString policy bypass via dynamic mapping keys
2026-05-27 14:55:08 +02:00
2026-02-07 09:07:38 +01:00
2026-05-23 09:03:34 +02:00
2026-02-07 09:12:49 +01:00
2024-11-20 20:05:33 +01:00

Twig, the flexible, fast, and secure template language for PHP
==============================================================

Twig is a template language for PHP.

Twig uses a syntax similar to the Django and Jinja template languages which
inspired the Twig runtime environment.

Sponsors
--------

.. raw:: html

    <a href="https://docs.blackfire.io/introduction?utm_source=twig&utm_medium=github_readme&utm_campaign=logo">
        <img src="https://static.blackfire.io/assets/intemporals/logo/png/blackfire-io_secondary_horizontal_transparent.png?1" width="255px" alt="Blackfire.io">
    </a>

More Information
----------------

Read the `documentation`_ for more information.

.. _documentation: https://twig.symfony.com/documentation
Languages
PHP 99.9%