mirror of
https://github.com/twigphp/Twig.git
synced 2026-08-25 01:16:26 +00:00
Fabien Potencier
baebc46b67
This PR was squashed before being merged into the twig-3.x branch. Discussion ---------- Fix sandbox `__toString` bypasses via `Traversable` in `join`/`replace` filters and the `in`/`not in` operators Fixes #512 Commits -------e3f66654b8Fix deprecation notices in tests475fb690acGuard sandbox `__toString` walker against self-referencing iterablese9e818cbfcFix sandbox `__toString` bypass via `Stringable` + `Traversable` containers8d6af0707bFix sandbox `__toString` bypass via the `in` and `not in` operatorscc1e21a2a2Fix sandbox __toString bypass via Traversable in join/replace filters
Twig, the flexible, fast, and secure template language for PHP
==============================================================
Twig is a template language for PHP.
Twig uses a syntax similar to the Django and Jinja template languages which
inspired the Twig runtime environment.
Sponsors
--------
.. raw:: html
<a href="https://docs.blackfire.io/introduction?utm_source=twig&utm_medium=github_readme&utm_campaign=logo">
<img src="https://static.blackfire.io/assets/intemporals/logo/png/blackfire-io_secondary_horizontal_transparent.png?1" width="255px" alt="Blackfire.io">
</a>
More Information
----------------
Read the `documentation`_ for more information.
.. _documentation: https://twig.symfony.com/documentation