AddToAny

Share this

 

Feed items

  • warning: Declaration of views_handler_argument::init(&$view, &$options) should be compatible with views_handler::init(&$view, $options) in /home/clients/ru/domains/development4web.com/html/sites/all/modules/views/handlers/views_handler_argument.inc on line 48.
  • warning: Declaration of views_handler_filter_boolean_operator::value_validate(&$form, &$form_state) should be compatible with views_handler_filter::value_validate($form, &$form_state) in /home/clients/ru/domains/development4web.com/html/sites/all/modules/views/handlers/views_handler_filter_boolean_operator.inc on line 111.
  • warning: Declaration of views_plugin_row_node_view::options_form(&$form, &$form_state) should be compatible with views_plugin_row::options_form($form, &$form_state) in /home/clients/ru/domains/development4web.com/html/sites/all/modules/views/modules/node/views_plugin_row_node_view.inc on line 35.

A Week of Symfony #928 (7-13 October 2024)

This week, development activity focused on Symfony 7.2, as tweaks and features continue to be merged ahead of its release at the end of November 2024. Additionally, we published the first post in the new in Symfony 7.2 series. Lastly, we shared more details about some of the talks from the SymfonyCon Vienna 2024 conference.




New in Symfony 7.2: Week, WordCount and Yaml Constraints

This is the first article of the series that shows the most important new features
introduced by Symfony 7.2, which will be released at the end of November 2024.




A Week of Symfony #927 (30 September - 6 October 2024)

This week, Symfony 7.2 entered into its stabilization period before its final release at the end of November 2024.




A Week of Symfony #926 (23-29 September 2024)

This week, the upcoming Symfony 7.2 version added new features such as support for defining trusted hosts and headers using env vars, improve the debug:asset-mapper command to search and filter assets and allow request parsers to return multiple RemoteEvent in webhooks.




Symfony 7.1.5 released

Symfony 7.1.5 has just been released.
Here is the list of the most important changes since 7.1.4:




Symfony 6.4.12 released

Symfony 6.4.12 has just been released.
Here is the list of the most important changes since 6.4.11:




Symfony 5.4.44 released

Symfony 5.4.44 has just been released.
Here is the list of the most important changes since 5.4.43:




A Week of Symfony #924 (9-15 September 2024)

This week, Symfony development activity focused on fixing bugs on existing branches: we provided a workaround for a parse_url() bug, updated the wcswidth data in the String component to Unicode 16, and updated ICU data to version 75.1.




Twig security release: Possible sandbox bypass

Affected Versions

Twig >1.0.0,<=1.44.7 || >2.0.0,<=2.16.0 || >3.0.0,<=3.11.0 || >=3.12.0,<3.14.0 versions are affected by this security issue.

Even if twig 1.x and 2.x are not maintained anymore, we've released new versions with the security fix.

This issue has been fixed in Twig 1.44.8, 2.16.1, and 3.14.0.

Description

Under some circumstances, the sandbox security checks are not run which allows user-contributed templates to bypass the sandbox restrictions.

The security issue happens when all these conditions are met: