Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: slackero/phpwcms
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v1.9.45
Choose a base ref
...
head repository: slackero/phpwcms
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v1.9.46
Choose a head ref
  • 11 commits
  • 55 files changed
  • 1 contributor

Commits on Apr 12, 2025

  1. Fixes possible index related update problem during update 

    `Uncaught mysqli_sql_exception: Specified key was too long; max key length is 1000 bytes…`
    @slackero
    slackero committed Apr 12, 2025
    Configuration menu
    Copy the full SHA
    8a2404e View commit details
    Browse the repository at this point in the history

  2. Bump version to 1.9.46-dev

    @slackero
    slackero committed Apr 12, 2025
    Configuration menu
    Copy the full SHA
    d70cc04 View commit details
    Browse the repository at this point in the history

  3. Updated README

    @slackero
    slackero committed Apr 12, 2025
    Configuration menu
    Copy the full SHA
    21d8fbf View commit details
    Browse the repository at this point in the history

Commits on Apr 21, 2025

  1. Updated composer packages 

    - update league/commonmark (2.6.1 => 2.6.2)
- require-dev roave/security-advisories (dev-latest 6c54d20)
    @slackero
    slackero committed Apr 21, 2025
    Configuration menu
    Copy the full SHA
    f0b699b View commit details
    Browse the repository at this point in the history

Commits on May 18, 2025

  1. Filter that the feedimport url schema given is http or https only

    @slackero
    slackero committed May 18, 2025
    Configuration menu
    Copy the full SHA
    d68c036 View commit details
    Browse the repository at this point in the history

  2. Findings of classes are not allowed for unserialization

    @slackero
    slackero committed May 18, 2025
    Configuration menu
    Copy the full SHA
    1a68a41 View commit details
    Browse the repository at this point in the history

  3. Ensure remote content type pages loads from valid URLs only

    @slackero
    slackero committed May 18, 2025
    Configuration menu
    Copy the full SHA
    5539dcb View commit details
    Browse the repository at this point in the history

Commits on Jun 2, 2025

  1. Fixes file disclosure vulnerability in image_resized.php 

    - Do not allow protocol handlers or absolute paths
- Force absolute paths related to the current directory
- Some minor changes
    @slackero
    slackero committed Jun 2, 2025
    Configuration menu
    Copy the full SHA
    07e14bb View commit details
    Browse the repository at this point in the history

  2. Updated composer packages, updated release date 

    - symfony/polyfill-php80 (v1.31.0 => v1.32.0)
- symfony/polyfill-mbstring (v1.31.0 => v1.32.0)
- league/commonmark (2.6.2 => 2.7.0)
- phpmailer/phpmailer (v6.9.3 => v6.10.0)
- roave/security-advisories (dev-latest 6c54d20 => dev-latest c6007a5)
- symfony/polyfill-php73 (v1.31.0 => v1.32.0)
- symfony/polyfill-php74 (v1.31.0 => v1.32.0)
- symfony/polyfill-php81 (v1.31.0 => v1.32.0)
- symfony/polyfill-php82 (v1.31.0 => v1.32.0)
- symfony/polyfill-php83 (v1.31.0 => v1.32.0)
    @slackero
    slackero committed Jun 2, 2025
    Configuration menu
    Copy the full SHA
    2f50365 View commit details
    Browse the repository at this point in the history

  3. Findings of classes are not allowed for unserialization

    @slackero
    slackero committed Jun 2, 2025
    Configuration menu
    Copy the full SHA
    c8edf97 View commit details
    Browse the repository at this point in the history

  4. Release phpwcms v1.9.46, the legacy version 

    Merge branch 'v1.9-dev' into phpwcms-legacy
    @slackero
    slackero committed Jun 2, 2025
    Configuration menu
    Copy the full SHA
    a8b49f4 View commit details
    Browse the repository at this point in the history
Loading