Justin Hileman c160134b6d Add a 'strict_callables' option to Mustache_Engine ...

Prevents treating array('ClassName', 'methodName') or array($instance, 'methodName') as section or interpolation callables. This helps protect against arbitrary code evaluation when user input is passed directly into the template.

This setting is recommended for PHP 5.3+, and all PHP 5.2 projects not using section or interpolation lambdas.

The default value is false to preserve backwards compatibility.

See #138

2013-03-23 10:54:13 -07:00

..

fixtures

Coding standards fixes.

2012-08-02 10:36:07 -07:00

Mustache/Test

Add a 'strict_callables' option to Mustache_Engine

2013-03-23 10:54:13 -07:00

bootstrap.php

replace __DIR__ with dirname(__FILE__)

2012-03-17 23:05:52 -07:00