CodeIgniter4

CodeIgniter4 copied to clipboard

Bug: [MariaDB] `phpunit` test errors

13

### PHP Version 8.2 ### CodeIgniter4 Version 4.4.1 ### CodeIgniter4 Installation Method Git ### Which operating systems have you tested for this bug? Linux ### Which server did you use?...

neznaika0

Security Guidelines are out of dated

2

See https://codeigniter4.github.io/CodeIgniter4/concepts/security.html The OWASP Top 10 in the docs is the version in 2013. https://owasp.org/www-pdf-archive/OWASP_Top_10_-_2013.pdf https://www.hahwul.com/cullinan/history-of-owasp-top-10/ The latest is OWASP Top 10 2021. https://owasp.org/www-project-top-ten/

kenjis

Bug: Inconsistent hostname/subdomain limitation in Routing

4

CodeIgniter version: 4.3.1 (1) `hostname` takes precedence over `subdomain` if a route has both: ```php $routes->get('/', 'Home::index'); $routes->get('/', 'Media::index', ['hostname' => 'media.example.com:8888', 'subdomain' => '*']); ``` `http://media.example.com:8888/ci431/public/` → `App\Controllers\Media::index` `http://user.example.com:8888/ci431/public/`...

kenjis

Dev: upsert()/setData() and binds

8

See https://github.com/codeigniter4/CodeIgniter4/pull/6600#discussion_r992735103 The following test (MySQL) fails now. Should `upsert()` also use binds? ```php public function testUpsertArrayAndCheckBinds() { $builder = $this->db->table('user'); $userData = [ 'email' => '[email protected]', 'name' => 'Upsert...

kenjis

Dev: use Superglobals service and remove superglobals

1

Use `Services::superglobals()` and remove all superglobals (`$_SERVER`, `$_GET`) in the code base (except in the `Superglobals` class). https://github.com/codeigniter4/CodeIgniter4/blob/60b22bf6022f5979036a2fd309df6e3a00e89c05/system/Config/Services.php#L723 https://github.com/codeigniter4/CodeIgniter4/blob/60b22bf6022f5979036a2fd309df6e3a00e89c05/system/Superglobals.php#L19

kenjis

See https://github.com/codeigniter4/CodeIgniter4/issues/7842#issuecomment-1692881082 and https://github.com/codeigniter4/CodeIgniter4/issues/7842#issuecomment-1692691379

kenjis

Bug: Duplicate Response Headers

8

### PHP Version 8.0 ### CodeIgniter4 Version 4.3 ### CodeIgniter4 Installation Method Composer (as dependency to an existing project) ### Which operating systems have you tested for this bug? Linux...

sclubricants

AutoRouterImproved extendability

4

In the current state, the `AutoRouterImproved` is not thought to be replaced by an App-Specific service and to be extended on. >[kenjis](https://github.com/codeigniter4/CodeIgniter4/issues/5889#issuecomment-1476185230): Because it is better to implement the interface,...

element-code

Bug: [4.4] Failed tests on Windows.

14

### PHP Version 7.4 ### CodeIgniter4 Version 4.4 ### CodeIgniter4 Installation Method Git ### Which operating systems have you tested for this bug? Windows ### Which server did you use?...

iRedds

Bug: [DebugBar] regex vulnerable to super-linear runtime due to backtracking

3

### PHP Version 7.4 ### CodeIgniter4 Version 4.1.1 ### CodeIgniter4 Installation Method Manual (zip or tar.gz) ### Which operating systems have you tested for this bug? Windows, Linux ### Which...

fliodhais