Affected versions

Twig >2.0.0,<2.14.11 || >3.0.0,<3.3.8 are affected by this security issue. Twig 1.x is not affected as the "sort" filter does not allow an arrow function in that version.

The issue has been fixed in Twig 2.14.11 and 3.3.8.

Description

When in a sandbox mode, the arrow parameter of the sort filter must be a closure to avoid attackers being able to run arbitrary PHP functions.

Version 5.0.0 of View package is released. There a few bugs fixed, some additions and a few backwards incompatible changes:

1. New and adjusted methods in ViewInterface.
2. Some methods became mutating instead of immutable since it is desired behavior considering sub-views and layout.
3. A simple view context class, ViewContext, was added.

Detailed changelog

PHP Monitor, the lightweight native Mac app to manage PHP and Laravel Valet, has released v5.0. See what's new!
The post PHP Monitor 5.0 for macOS is Here appeared first on Laravel News.