Skip to content

2.0.13

Choose a tag to compare

View all tags
@engram-design engram-design released this 14 Aug 11:54
2.0.13
36635cc

Changed

  • Twig sandbox now allows methods/properties on safe Craft value objects by class family (ElementInterface, ElementQueryInterface, ElementCollection when available, DateTimeInterface, Illuminate Enumerable), instead of requiring plugins to whitelist every method name.
  • Added allowedClasses support to SecurityPolicy / Templates (merged with the defaults above).
  • Honour Craft’s #[AllowedInSandbox] attributes when present (Craft 4.17+).

Fixed

  • Fixed legitimate element-query usage in sandboxed templates (e.g. {{ fieldHandle.one().title }}) being blocked after the 2.0.11 allow-list enforcement.
Assets 2
Loading