Symfony 4.4.46 has just been released.
Here is the list of the most important changes since 4.4.45:
Symfony 4.4.46 has just been released.
Here is the list of the most important changes since 4.4.45:
SymfonyCon Disneyland Paris 2022 is just around the corner! D-49!
As this event approaches we are proud to announce you the next speaker:
Did you notice that a new track appeared in the SymfonyCon Disneyland Paris 2022 program?
We are super excited to announce that new speakers are joining us and that you will discover them every day through the blog posts! Today it is the turn of:
Affected versions
Twig >1.0.0,<1.44.7 || >2.0.0,<2.15.3 || >3.0.0,<3.4.3 are affected by this security issue.
The issue has been fixed in Twig 1.44.7, 2.15.3 and 3.4.3.
Description
When using the filesystem loader to load templates for which the name is a user input, it is possible to use the source
or include
statement to read arbitrary files from outside the templates directory when using a namespace like @somewhere/../some.file
(in such a case, validation is bypassed).
This week, Symfony development activity focused on finishing and polishing some new features for the upcoming Symfony 6.2 version, such us: updating codebase to use modern PHP features like null coalescing assignment and match statements; adding new config options for HttpCache; and
SymfonyCon Disneyland Paris 2022 is only 2 months away!
The conference will start with 2 days of workshops organized on November 15-16 at the Disney's Newport Bay Club. Seats are limited and registration is based on first come first served!
SymfonyCon Disneyland Paris 2022 is around the corner! The conference will start in less than 2 months from November 15 to 16 at the Disney's Newport Bay Club for the workshops and from November 17 to 18 at the Disney's Hotel New York - Art of Marvel for the main conference!
The SymfonyCon Disneyland Paris 2022 will start with 2 days of pre-conference workshops organized on November 15-16.
SymfonyCon Disneyland Paris 2022 will start in less than 2 months!
As this event approaches we are pleased to announce you the next person joining the speaker team: