changelog

This commit is contained in:
Simon Wisselink
2021-02-17 22:57:33 +01:00
parent 4f634c0097
commit 3148d406a0

View File

@@ -7,8 +7,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
## [Unreleased]
### Security
- Prevent access to `$smarty.template_object` in Security mode
- Code injection vulnerability by using illegal function names in `{function name='blah'}{/function}`
- Prevent access to `$smarty.template_object` in sandbox mode
- Fixed code injection vulnerability by using illegal function names in `{function name='blah'}{/function}`
## [3.1.38] - 2021-01-08