smarty-php/smarty
1
0
Fork 0
mirror of https://github.com/smarty-php/smarty.git synced 2025-08-03 01:44:26 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'release/3.1.39'

Browse Source
This commit is contained in:
Simon Wisselink
2021-02-17 22:57:51 +01:00
parent 3148d406a0 a21f59663c
commit e27da524f7
2 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
CHANGELOG.md
View File

@@ -6,6 +6,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
## [Unreleased] ## [Unreleased]
## [3.1.39] - 2021-02-17
### Security ### Security
- Prevent access to `$smarty.template_object` in sandbox mode - Prevent access to `$smarty.template_object` in sandbox mode
- Fixed code injection vulnerability by using illegal function names in `{function name='blah'}{/function}` - Fixed code injection vulnerability by using illegal function names in `{function name='blah'}{/function}`

2
libs/Smarty.class.php
View File

@@ -111,7 +111,7 @@ class Smarty extends Smarty_Internal_TemplateBase
/** /**
* smarty version * smarty version
*/ */
const SMARTY_VERSION = '3.1.38'; const SMARTY_VERSION = '3.1.39';
/** /**
* define variable scopes * define variable scopes
*/ */