Simon Wisselink
d8fa8c982f
Fixed unit tests
2022-01-09 23:29:58 +01:00
Simon Wisselink
de7e15d423
Merge branch 'release/3.1.41' into support/3.1
v3.1.41
2022-01-09 23:21:20 +01:00
Simon Wisselink
1b6919da85
version bump
2022-01-09 23:21:19 +01:00
Simon Wisselink
457284283a
Rewrote the mailto function to not use eval when encoding with javascript
...
(cherry picked from commit c7576eb1a1 )
2022-01-09 23:18:17 +01:00
Simon Wisselink
9ffca4a093
Make make-release.sh safer by checking for version number.
2021-10-22 16:00:25 +02:00
Simon Wisselink
0c8a549603
Make make-release.sh safer by checking for version number.
2021-10-22 15:58:10 +02:00
Simon Wisselink
9d4f8309ed
Merge branch 'release/3.1.40'
v3.1.40
2021-10-13 12:04:31 +02:00
Simon Wisselink
7c4354e7b8
version bump
2021-10-13 12:04:29 +02:00
Simon Wisselink
770bc4aae2
Merge branch 'm-haritonov-escape'
2021-08-19 16:15:57 +02:00
Simon Wisselink
0ff7ba5ab6
Add changelog
2021-08-19 16:13:30 +02:00
Simon Wisselink
3b0fd82849
Merge branch 'escape' of https://github.com/m-haritonov/smarty into m-haritonov-escape
2021-08-19 15:26:27 +02:00
Ikko Ashimine
1a68b79b6c
Update README.md ( #668 )
...
github -> GitHub
2021-08-18 23:23:36 +02:00
Michael Voříšek
e3eabe0b96
Delete uninted file expectException ( #664 )
2021-05-25 21:18:07 +02:00
Simon Wisselink
4698dd9fb0
Changelog
2021-03-21 21:24:32 +01:00
David Goodwin
039043e5a2
Update modifier.escape.php ( #649 )
...
trigger a notice if an incorrect modifier was used (E.g.|escape:quotes vs |escape:quote).
2021-03-21 21:21:55 +01:00
Mihail Haritonov
9cde36e3bc
plugins: escape: javascript escaping secure fix
2021-02-28 16:44:56 +03:00
Simon Wisselink
290aee6db3
Update CHANGELOG.md
...
Add CVE's
2021-02-21 22:23:45 +01:00
Simon Wisselink
e2485fa45e
Create SECURITY.md
2021-02-21 22:03:44 +01:00
Simon Wisselink
e27da524f7
Merge branch 'release/3.1.39'
v3.1.39
2021-02-17 22:57:51 +01:00
Simon Wisselink
a21f59663c
version bump
2021-02-17 22:57:50 +01:00
Simon Wisselink
3148d406a0
changelog
2021-02-17 22:57:33 +01:00
Simon Wisselink
4f634c0097
Merge branch 'bugfix/tplfunction_sandbox_escape'
2021-02-17 22:52:34 +01:00
Simon Wisselink
c9272058d9
Merge branch 'bugfix/template_object_sandbox_escape'
2021-02-17 22:51:38 +01:00
Simon Wisselink
e66e293a8a
Do not push release automatically in make release script, to enable a chance to catch any errors.
2021-02-17 22:50:52 +01:00
Simon Wisselink
74cab5a56b
updated changelog header to security
2021-02-17 22:30:35 +01:00
Simon Wisselink
8fc66e27a7
Cannot use in Smarty3 yet, revert to @expectedException
2021-02-01 10:33:00 +01:00
Simon Wisselink
2543174460
Cannot use in Smarty3 yet, revert to @expectedException
2021-02-01 10:31:20 +01:00
Simon Wisselink
288a54f6b0
Add unit test
2021-01-24 23:52:45 +01:00
Simon Wisselink
165f1bd4d2
Fixed Code injection vulnerability by using illegal function names
2021-01-24 23:44:07 +01:00
Simon Wisselink
6463519a6c
Prevent access to .template_object when in security mode to prevent PHP code injection vulnerability
2021-01-24 23:13:26 +01:00
Simon Wisselink
fedc127057
Mark tests that use sleep calls as slow, so we can ignore them when running unit tests in development
2021-01-16 23:01:15 +01:00
Ikko Ashimine
3af2df20a4
Fix typo in StreamVariableTest.php ( #616 )
...
existant -> existent
2021-01-08 17:28:33 +01:00
Simon Wisselink
63b3c0aed0
Merge branch 'release/3.1.38'
v3.1.38
2021-01-08 15:05:42 +01:00
Simon Wisselink
2af2a07906
version bump
2021-01-08 15:05:40 +01:00
Simon Wisselink
cb4254355e
Removed unused error_reporting.ini file, updated version number in Smarty::SMARTY_VERSION, fixed inline phpdoc that caused an IDE error
2021-01-08 15:05:10 +01:00
Simon Wisselink
f65e7ddd22
fixed changelog
v3.1.37.1
2021-01-07 00:34:08 +01:00
Simon Wisselink
92e05d4f8d
Brought lexer source functionally up-to-date with compiled version ( #625 )
...
Fixes #621
v3.1.37
2021-01-07 00:26:28 +01:00
Simon Wisselink
e2b28167f8
Clarify correct LGPL version.
...
Fixes #612
2021-01-05 22:23:13 +01:00
Libor M
820782cd80
const fix for usage with comparison operators ( #618 )
...
Fixes #609 #613
2021-01-05 22:07:44 +01:00
Simon Wisselink
c295786e43
Fixes for php8.0.0beta3 ( #608 )
...
* Set $errcontext argument optional to support PHP 8
- Argument is optional and deprecated in PHP 7.2
* Getting ready for PHP8, handling changed error levels/handlers mostly
* php5 compat syntax
* Updated UndefinedTemplateVarTest for PHP8 (and disabled a check for PHP<5.6) and re-enabled php:nightly in travis config
* Attempt to fix travis runs for (almost) all php versions supported
* Fix unit tests for php8, force composer to think we are still php7 to pick a supported phpunit and being less specific about an error msg because PHP8 is in active development and the exact wording is changing.
* Fixed a unit test that accidentally passed on phpunit < 7 because of sloppy string comparison.
* changelog
* run travis in xenial where possible for latest php versions. Fix unit tests from freakingo over inconsistent error messages in php8-beta.
* Incorporated AnrDaemons suggestions, making composer figure out the required phpunit version instead of specifying it explicitly and removing a unneeded error supression (@).
Co-authored-by: Jorge Sá Pereira <me@jorgesapereira.com >
2020-09-12 21:37:31 +02:00
♚ PH⑦ de Soria™♛
859a09e1bb
Bumped phpdoc @version tag to 3.1.36 ( #598 )
...
Although this could be removed, since the header comment is still there, it's good to keep the @version tag updated in order to avoid confusion for those who read it :)
2020-09-11 13:34:15 +02:00
Simon Wisselink
a5934a755d
Fixed a unit test that accidentally passed on phpunit < 7 because of sloppy string comparison.
2020-09-11 13:22:45 +02:00
Simon Wisselink
5a72624380
Test travis config for PHP5 versions ( #592 )
...
* Run tests for PHP5.x
* Start from 5.3 since composer requires it and without it we cannot install phpunit
* Specify dist for 5.3
* Disabled nightly testing because phpunit doesn't support php8 yet.
2020-05-05 15:08:31 +02:00
Simon Wisselink
1418c8c422
Merge branch 'AnrDaemon-fix-php5.3-compat'
2020-05-05 09:21:07 +02:00
Simon Wisselink
f46c13b32a
Updated changelog
2020-05-05 09:20:56 +02:00
AnrDaemon
eae19f23b9
PHP 5.3 compatibility fixes
2020-05-05 01:37:36 +03:00
Sławomir Kaleta
e1c050a32c
Fix comment - Method can return string ( #583 )
2020-04-14 17:26:20 +02:00
Simon Wisselink
fd148f7ade
Merge branch 'release/3.1.36'
v3.1.36
2020-04-14 16:44:26 +02:00
Simon Wisselink
07772aac90
version bump
2020-04-14 16:44:24 +02:00
Simon Wisselink
08227651fc
Fixed #584
2020-04-14 16:44:09 +02:00