smarty-php/smarty
1
0
Fork 0
mirror of https://github.com/smarty-php/smarty.git synced 2025-08-05 10:54:27 +02:00
Code Issues Packages Projects Releases Wiki Activity

- bugfix in Smarty_Security 'nl2br' should be a trusted modifier, not PHP function (code.google issue 223)

Browse Source
This commit is contained in:
Uwe Tews
2015-05-13 20:17:02 +02:00
parent dea56a2243
commit 8ee805632d
2 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
change_log.txt
View File

@@ -6,6 +6,7 @@
was extended or Smarty properties had been modified in the class source was extended or Smarty properties had been modified in the class source
- display Smarty version number - display Smarty version number
- Truncate lenght of Origin display and extend strin value display to 80 character - Truncate lenght of Origin display and extend strin value display to 80 character
- bugfix in Smarty_Security 'nl2br' should be a trusted modifier, not PHP function (code.google issue 223)
12.05.2015 12.05.2015
- bugfix {$smarty.constant.TEST} did fail on undefined constant https://github.com/smarty-php/smarty/issues/28 - bugfix {$smarty.constant.TEST} did fail on undefined constant https://github.com/smarty-php/smarty/issues/28

4
libs/sysplugins/smarty_security.php
View File

@@ -108,7 +108,6 @@ class Smarty_Security
'count', 'sizeof', 'count', 'sizeof',
'in_array', 'is_array', 'in_array', 'is_array',
'time', 'time',
'nl2br',
); );
/** /**
* This is an array of trusted PHP modifiers. * This is an array of trusted PHP modifiers.
@@ -119,7 +118,8 @@ class Smarty_Security
*/ */
public $php_modifiers = array( public $php_modifiers = array(
'escape', 'escape',
'count' 'count',
'nl2br',
); );
/** /**
* This is an array of allowed tags. * This is an array of allowed tags.