diff options
| author | Uwe Tews <uwe.tews@googlemail.com> | 2017-07-21 05:13:54 +0200 |
|---|---|---|
| committer | Uwe Tews <uwe.tews@googlemail.com> | 2017-07-21 05:13:54 +0200 |
| commit | 614ad1f8b9b00086efc123e49b7bb8efbfa81b61 (patch) | |
| tree | 9888846ef27b3921eb4cecfb20839f6270d17e57 /change_log.txt | |
| parent | a6f3a518e1818908322d71296c6b023d5752cd03 (diff) | |
| download | smarty-614ad1f8b9b00086efc123e49b7bb8efbfa81b61.tar.gz smarty-614ad1f8b9b00086efc123e49b7bb8efbfa81b61.tar.bz2 smarty-614ad1f8b9b00086efc123e49b7bb8efbfa81b61.zip | |
- security possible PHP code injection on custom resources at display() or fetch()
calls if the resource does not sanitize the template name
Diffstat (limited to 'change_log.txt')
| -rw-r--r-- | change_log.txt | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/change_log.txt b/change_log.txt index 3db0cd9e..7ab4888f 100644 --- a/change_log.txt +++ b/change_log.txt @@ -1,4 +1,8 @@ ===== 3.1.32 - dev === +21.7.2017 + - security possible PHP code injection on custom resources at display() or fetch() + calls if the resource does not sanitize the template name + 27.5.2017 - bugfix change compiled code for registered function and modifiers to called as callable to allow closures https://github.com/smarty-php/smarty/pull/368, https://github.com/smarty-php/smarty/issues/273 |