Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix MakeViewVariableOptionalSolution to disallow stream wrappers and files that do not end in .blade.php #356

Merged
merged 2 commits into from Mar 8, 2021

Conversation

anasmirza534
Copy link
Contributor

This is already fixed in 2.5.2, See #334

I could not update to 2.5.2 due to some dependent package required php 7.3, currently clients site is running in php 7.2

On branch 2.4.1-branch
Changes to be committed:
modified: src/Solutions/MakeViewVariableOptionalSolution.php

anasmirza534 and others added 2 commits February 18, 2021 17:16
…files that do not end in .blade.php

This is already fixed in 2.5.2, See facade#334

I could not update to 2.5.2 due to some dependent package required php 7.3, currently clients site is running in php 7.2

On branch 2.4.1-branch
Changes to be committed:
	modified:   src/Solutions/MakeViewVariableOptionalSolution.php
@AlexVanderbist AlexVanderbist merged commit 2ffd65f into facade:master Mar 8, 2021
@AlexVanderbist
Copy link
Contributor

Thanks! Tagged as 2.4.2

particleflux added a commit to particleflux/security-advisories that referenced this pull request Mar 26, 2021
The vulnerability in `facade/ignition` is falsely reported for version
2.4.2.

It has been fixed in facade/ignition#334 for
2.5.x, and in facade/ignition#356 for 2.4.x.
particleflux added a commit to particleflux/security-advisories that referenced this pull request Mar 26, 2021
The vulnerability in `facade/ignition` is falsely reported for version
2.4.2.

It has been fixed in facade/ignition#334 for
2.5.x, and in facade/ignition#356 for 2.4.x.

Fixes FriendsOfPHP#543
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
2 participants