Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Backports for 1.4.x #325

Merged
merged 18 commits into from
Mar 18, 2025
Merged

Backports for 1.4.x #325

merged 18 commits into from
Mar 18, 2025

Conversation

williamdes
Copy link
Contributor

@williamdes williamdes commented Mar 15, 2025

  • Backports PHP 8.4 fixes + adds one new
  • Backports some phpunit fixes and adds phpunit 10 support for PHP 8

See last test run: https://github.com/williamdes/Slim-Psr7/actions/runs/13876256748

New integration tests to be fixed: #324 (comment)
Probably not related to this PR, but will have to be done for CI to pass

Fixes: #324

williamdes and others added 12 commits March 15, 2025 20:08
v1 supports PHP 7
v2 supports PHP 8
(cherry picked from commit 36998c9)
(cherry picked from commit 501b60f)
(cherry picked from commit 509df95)
(cherry picked from commit e17e0eb)
To avoid `PHPUnit\Framework\Exception: This test uses TestCase::prophesize(), but phpspec/prophecy is not installed. Please run "composer require --dev phpspec/prophecy"`.
akrabat added 2 commits March 17, 2025 20:37
Userinfo that is already encoded should not be encoded twice. Fixes
`testAlreadyEncodedUserInfo` from the updated psr7-integration-tests.
As per the updated psr7-integration-tests, we need to ensure that when a
path is used in isolation from the authority, it will not cause URL
poisoning and/or XSS issues.

See https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3257
@williamdes

This comment was marked as resolved.

@williamdes williamdes marked this pull request as ready for review March 17, 2025 21:46
@akrabat akrabat merged commit 2be625e into slimphp:1.4.x Mar 18, 2025
8 of 9 checks passed
@akrabat akrabat added this to the 1.4.2 milestone Mar 18, 2025
akrabat added a commit that referenced this pull request Mar 23, 2025
Backports for 1.5.x

- Add support for PHP 8.4 by @williamdes in #325
- Fixed: Uri::getPath() correctly normalises leading slashes.
- Fixed: Uri no longer double encodes user info.
akrabat added a commit that referenced this pull request Mar 23, 2025
Backports for 1.6.x

- Add support for PHP 8.4 by @williamdes in #325
- Fixed: Uri::getPath() correctly normalises leading slashes.
- Fixed: Uri no longer double encodes user info.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants