smarty-php/smarty
1
0
Fork 0
mirror of https://github.com/smarty-php/smarty.git synced 2025-10-31 20:31:41 +01:00
Code Issues Packages Projects Releases Wiki Activity
4,813 Commits 108 Branches 94 Tags
js_escape_security_fix_31
Commit Graph

1363 Commits

Author SHA1 Message Date
Simon Wisselink
e1fb2ad688 clean output buffer for Throwable instead of just Exception (#798) 
* clean output buffer for Throwable instead of just Exception
 2022-09-22 14:56:33 +02:00
Simon Wisselink
4eb86a6770 Replace '*/' in user supplied input in C-style comments with '* /'. 2022-05-16 13:36:03 +02:00
Simon Wisselink
28519ca00f Merge pull request from GHSA-4h9c-v5vg-5m6m 2022-01-10 10:48:27 +01:00
Simon Wisselink
4f634c0097 Merge branch 'bugfix/tplfunction_sandbox_escape' 2021-02-17 22:52:34 +01:00
Simon Wisselink
165f1bd4d2 Fixed Code injection vulnerability by using illegal function names 2021-01-24 23:44:07 +01:00
Simon Wisselink
6463519a6c Prevent access to .template_object when in security mode to prevent PHP code injection vulnerability 2021-01-24 23:13:26 +01:00
Simon Wisselink
cb4254355e Removed unused error_reporting.ini file, updated version number in Smarty::SMARTY_VERSION, fixed inline phpdoc that caused an IDE error 2021-01-08 15:05:10 +01:00
Libor M
820782cd80 const fix for usage with comparison operators (#618) 
Fixes #609 #613
 2021-01-05 22:07:44 +01:00
Simon Wisselink
c295786e43 Fixes for php8.0.0beta3 (#608) 
* Set $errcontext argument optional to support PHP 8

- Argument is optional and deprecated in PHP 7.2

* Getting ready for PHP8, handling changed error levels/handlers mostly

* php5 compat syntax

* Updated UndefinedTemplateVarTest for PHP8 (and disabled a check for PHP<5.6) and re-enabled php:nightly in travis config

* Attempt to fix travis runs for (almost) all php versions supported

* Fix unit tests for php8, force composer to think we are still php7 to pick a supported phpunit and being less specific about an error msg because PHP8 is in active development and the exact wording is changing.

* Fixed a unit test that accidentally passed on phpunit < 7 because of sloppy string comparison.

* changelog

* run travis in xenial where possible for latest php versions. Fix unit tests from freakingo over inconsistent error messages in php8-beta.

* Incorporated AnrDaemons suggestions, making composer figure out the required phpunit version instead of specifying it explicitly and removing a unneeded error supression (@).

Co-authored-by: Jorge Sá Pereira <me@jorgesapereira.com>
 2020-09-12 21:37:31 +02:00
AnrDaemon
eae19f23b9 PHP 5.3 compatibility fixes 2020-05-05 01:37:36 +03:00
Simon Wisselink
19ef8342aa Strip now removes whitespaces after comment (#582) 
* Mark text sections as to be stripped, but do not strip them right away. Combine equivalent sections in chunks at the template level and strip combined chunks where possible.
- simplified Smarty_Internal_TemplateCompilerBase::processText along the way
Fixes #447
 2020-04-13 22:27:42 +02:00
Simon Wisselink
4f89f6d84f Throw SmartyException when setting caching attributes for cacheable plugin as compiling this would fail (#573) 
Fixes #457
 2020-04-13 22:26:24 +02:00
Simon Wisselink
4396351d75 Switched to a more advanced regex to test wheter parameter is a variable (#567) 
* This appears to fix #453, #498, #499 and possibly more issues.
 2020-04-13 22:24:29 +02:00
Vadim Kuragkovskiy
38b5ac72fa fix minor typo 2020-02-07 18:56:25 +02:00
Simon Wisselink
62d772e734 Fixed broken nesting and null handling. 2020-01-27 16:02:02 +01:00
Simon Wisselink
388993e9ca Fix foreachelse on arrayiterators 
Keep track of main loop using a do_else variable.
Fixed #506
 2020-01-27 15:24:45 +01:00
mohrt
a62a7caf97 Merge pull request #540 from Hunman/master 
Fixing problem with assigning value to object variables as arrays in smarty_internal_compile_assign
 2020-01-13 18:50:41 -06:00
mohrt
9e9961feae Merge pull request #551 from bits4breakfast/master 
Replace callback typehint with callable
 2020-01-13 18:45:23 -06:00
JercSi
b9b9d30144 Typo in exception message 
Added space between 'line' and line number.
 2019-12-20 09:49:32 +01:00
Matteo Galli
c7ee6a3333 Replace callback typehint with callable 
`callback` is not a valid PHP type and makes static analysis tools failing
 2019-08-14 09:34:42 +02:00
Sanyi
7bc96d56fe Fix missing parenthesises in smarty_internal_compile_assign 2019-05-13 17:15:14 +02:00
uwetews
68537949f2 - bugfix a nested subblock in an inheritance child template was not replace by 
outer level block with same name in same child template https://github.com/smarty-php/smarty/issues/500
 2018-10-30 01:03:52 +01:00
uwetews
433d220fa1 - bugfix Smarty::$php_handling == PHP_PASSTHRU (default) did eat the "\n" (newline) character if it did directly followed 
a PHP tag like "?>" or other https://github.com/smarty-php/smarty/issues/501
 2018-10-29 23:32:22 +01:00
uwetews
c930f0e207 - bugfix {insert} not works when caching is enabled and included template is present 
https://github.com/smarty-php/smarty/issues/496
 2018-10-11 06:56:22 +02:00
uwetews
7f531f6a44 09.10.2018 
- bugfix fix of 26.8.2017 https://github.com/smarty-php/smarty/issues/327
   modifier is applied to sum expression https://github.com/smarty-php/smarty/issues/491
 - bugfix indexed arrays could not be defined "array(...)""
 2018-10-09 03:36:14 +02:00
uwetews
9301ba4bfc 09.10.2018 
- bugfix fix of 26.8.2017 https://github.com/smarty-php/smarty/issues/327
   modifier is applied to sum expression https://github.com/smarty-php/smarty/issues/491
 - bugfix indexed arrays could not be defined "array(...)""
 2018-10-09 03:34:34 +02:00
uwetews
a6cb648dfc - bugfix large plain text template sections without a Smarty tag > 700kB could 
could fail in version 3.1.32 and 3.1.33 because PHP preg_match() restrictions
    https://github.com/smarty-php/smarty/issues/488
 2018-09-18 04:46:30 +02:00
uwetews
2d1905cd88 - bugfix {foreach} using new style property access like {$item@property} on 
Smarty 2 style named foreach loop could produce errors https://github.com/smarty-php/smarty/issues/484
 2018-09-03 01:18:26 +02:00
uwetews
2c60503dfc - bugfix some custom left and right delimiters like '{^' '^}' did not work 
https://github.com/smarty-php/smarty/issues/450 https://github.com/smarty-php/smarty/pull/482
 2018-08-31 17:32:44 +02:00
uwetews
4f7cd8f1b3 - reformating for PSR-2 coding standards https://github.com/smarty-php/smarty/pull/483 2018-08-31 16:45:09 +02:00
uwetews
7a8607fe17 - PSR-2 code style fixes for config and template file Lexer/Parser generated with 
the Smarty Lexer/Parser generator from https://github.com/smarty-php/smarty-lexer
    https://github.com/smarty-php/smarty/pull/483
 2018-08-31 02:37:47 +02:00
uwetews
8e09f97a14 - bugfix/enhancement {capture} allow variable as capture block name in Smarty special variable 
like $smarty.capture.$foo https://github.com/smarty-php/smarty/issues/478 https://github.com/smarty-php/smarty/pull/481
 2018-08-26 00:20:31 +02:00
uwetews
799b5cb342 - fix PSR-2 coding standards and PHPDoc blocks https://github.com/smarty-php/smarty/pull/452 
https://github.com/smarty-php/smarty/pull/475
    https://github.com/smarty-php/smarty/pull/473
  - bugfix PHP5.2 compatibility https://github.com/smarty-php/smarty/pull/472
 2018-08-19 02:35:46 +02:00
Sławomir Kaleta
2404095783 Update PSR-2 2018-06-12 09:58:15 +02:00
Uwe Tews
cc4d8fa1a0 - bugfix strip-block produces different output in Smarty v3.1.32 https://github.com/smarty-php/smarty/issues/436 2018-05-17 16:04:48 +02:00
Uwe Tews
87ec44e9f8 - bugfix Smarty::compileAllTemplates ignores $extension parameter https://github.com/smarty-php/smarty/issues/437 
https://github.com/smarty-php/smarty/pull/438
 2018-05-17 13:50:14 +02:00
Uwe Tews
e2aec4d011 Fix annotation https://github.com/smarty-php/smarty/issues/441 2018-05-17 08:12:26 +02:00
Uwe Tews
514d99beaa - improvement do not compute total property in {foreach} if not needed https://github.com/smarty-php/smarty/issues/443 2018-05-17 06:27:35 +02:00
Uwe Tews
115e178884 - bugfix plugins may not be loaded when setMergeCompiledIncludes is true https://github.com/smarty-php/smarty/issues/435 2018-05-17 04:40:58 +02:00
Uwe Tews
c9dbe1d08c - bugfix regarding Security Vulnerability did not solve the problem under Linux 2018-04-26 21:38:08 +02:00
Uwe Tews
2e081a51b1 - bugfix regarding Security Vulnerability did not solve the problem under Linux 2018-04-26 18:06:45 +02:00
Uwe Tews
f9ca3c63d1 - bugfix regarding Security Vulnerability did not solve the problem under Linux 2018-04-26 13:02:51 +02:00
Uwe Tews
8d21f38dc3 - bugfix possible Security Vulnerability in Smarty_Security class. 2018-04-24 10:38:18 +02:00
Uwe Tews
fbbb292ef0 update access to parent object 2018-04-19 16:04:41 +02:00
Uwe Tews
8bea607b78 fix comment lines of inline subtemplates 2018-04-19 15:57:37 +02:00
Uwe Tews
336c07c23f - bugfix plugins may not be loaded if {function} or {block} tags are executed in nocache mode 
https://github.com/smarty-php/smarty/issues/371
 2018-03-28 07:15:29 +02:00
Uwe Tews
0dbace8321 - new feature {parent} = {$smarty.block.parent} {child} = {$smarty.block.child} 2018-03-26 22:35:31 +02:00
Uwe Tews
c81948d602 - bugfix preg_replace could fail on large content resulting in a blank page https://github.com/smarty-php/smarty/issues/417 2018-03-23 19:34:18 +01:00
Uwe Tews
3a3b8c75a1 - bugfix preg_replace could fail on large content resulting in a blank page https://github.com/smarty-php/smarty/issues/417 2018-03-23 19:14:53 +01:00
Uwe Tews
d646d4678c - bugfix preg_replace could fail on large content resulting in a blank page https://github.com/smarty-php/smarty/issues/417 2018-03-23 19:11:12 +01:00