Skip to content

v5.8.5

Latest

Choose a tag to compare

@wisskid wisskid released this 04 Oct 21:33

What's Changed

  • Security: prevent attacker-controlled template output from forging a nocache marker that injects raw PHP into the generated cache file when a template is rendered through the extends:/inheritance path
  • Fix double semicolon in getRightDelimiter method by @colemanw in #1202

Full Changelog: v5.8.4...v5.8.5