raintpl3
raintpl3 copied to clipboard
Sandbox does not allow any variables to contain any parts from blacklists.
I was doing this <td>{if="isset( $value.executable )"}{$value.executable|safe}{/if}</td>
and it took me a while to figure this out.
Hi Pavel, good catch. I think we'll have to revisit the entire blacklist logic and even if complex, we need a whitelist to block everything except the white listed methods. I'll look into this issue later today and try to see what solution we can come with.
Thanks
Fixed. Please review: https://github.com/rainphp/raintpl3/tree/issue-48