Skip to content

v4.5.8

Choose a tag to compare

@wisskid wisskid released this 04 Oct 21:34
· 195 commits to master since this release

What's Changed

  • Security: prevent attacker-controlled template output from forging a nocache marker that injects raw PHP into the generated cache file when a template is rendered through the extends:/inheritance path

Full Changelog: v4.5.7...v4.5.8