Fixed missing function allow

humhub · Jan 8, 2024 · fab3c36 · fab3c36
1 parent ddcdaec
commit fab3c36
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 1 deletion.
diff --git a/docs/CHANGELOG.md b/docs/CHANGELOG.md
@@ -1,6 +1,10 @@
 Changelog
 =========
 
+1.10.2 (January 8, 2024)
+------------------------
+- Fix: Twig SandboxPolicy Function Whitelist broken
+
 1.10.1 (January 8, 2024)
 ------------------------
 - Enh: Added "random" to Twig SandboxPolicy

diff --git a/lib/templates/twig/TwigEngine.php b/lib/templates/twig/TwigEngine.php
@@ -54,6 +54,7 @@ private function getSecurityPolicy(): ?SecurityPolicy
         $policy->setAllowedTags($module->enableTwiqSandboxExtensionConfig['allowedTags']);
         $policy->setAllowedMethods($module->enableTwiqSandboxExtensionConfig['allowedMethods']);
         $policy->setAllowedFilters($module->enableTwiqSandboxExtensionConfig['allowedFilters']);
+        $policy->setAllowedFunctions($module->enableTwiqSandboxExtensionConfig['allowedFunctions']);
         $policy->setAllowedProperties($module->enableTwiqSandboxExtensionConfig['allowedProperties']);
 
         return $policy;

diff --git a/module.json b/module.json
@@ -3,7 +3,7 @@
     "name": "Custom Pages",
     "description": "Create custom pages and widgets and share them with your users. Take advantage of a wide range of editing options, including HTML and Markdown.",
     "keywords": ["pages", "custom", "iframe", "markdown", "link", "navigation", "spaces"],
-    "version": "1.10.1",
+    "version": "1.10.2",
     "homepage": "https://github.com/humhub/custom-pages",
     "humhub": {
         "minVersion": "1.14"