v3.1.45

Security

• Prevent PHP injection through malicious block name or include file name. This addresses CVE-2022-29221

Fixed

• Math equation max(x, y) didn't work anymore #721

v4.1.0

Added support for PHP 8.1.

What's Changed

• PHP 8.1 compatibility (without IntlDateFormatter) by @thirsch in #713
• Updating PHP 8.0 to 8.1 in the docs. by @thirsch in #717

Full Changelog: v4.0.4...v4.1.0

v4.0.4

What's Changed

• Support multiple operators in math equations by @caugner in #708

Full Changelog: v4.0.3...v4.0.4

v3.1.44

What's Changed

• Fixes illegal characters warning in math

Full Changelog: v3.1.43...v3.1.44

v4.0.3

What's Changed

• Prevent evasion of the static_classes security policy. This addresses CVE-2021-21408

Full Changelog: v4.0.2...v4.0.3

v3.1.43

Prevent evasion of the static_classes security policy. This addresses CVE-2021-21408

Full Changelog: v3.1.42...v3.1.43

v4.0.2

Prevent arbitrary PHP code execution through maliciously crafted expression for the math function. This addresses CVE-2021-29454

Full Changelog: v4.0.1...v4.0.2

v4.0.1

What's Changed

• Rewrote the mailto function to not use eval when encoding with javascript
• Feature/add docs by @wisskid in #689
• Fix for php 8.0 by @pandarek in #687
• Fix a typo by @marclaporte in #690

New Contributors

• @pandarek made their first contribution in #687
• @marclaporte made their first contribution in #690

Full Changelog: v4.0.0...v4.0.1

v3.1.42

Prevent arbitrary PHP code execution through maliciously crafted expression for the math function. This addresses CVE-2021-29454

Full Changelog: v3.1.41...v3.1.42

v3.1.41

Rewrote the mailto function to not use eval when encoding with javascript