Grav v1.5.2 Release Notes

  • 10/01/2018

      • Added new Security class for Grav security functionality including XSS checks
      • Added new bin/grav security command to scan for security issues
      • Added new xss() Twig function to allow for XSS checks on strings and arrays
      • Added onHttpPostFilter event to allow plugins to globally clean up XSS in the forms and tasks
      • Added Deprecated tab to DebugBar to catch future incompatibilities with later Grav versions
      • Added deprecation notices for features which will be removed in Grav 2.0
      • Updated vendor libraries to latest 🛠 1.
      • Allow $page->slug() to be called before $page->init() without breaking the page
      • Fix for Page::translatedLanguages() to use routes always #2163
      • Fixed nicetime() twig function
      • Allow twig tags {% script %}, {% style %} and {% switch %} to be placed outside of blocks
      • Session expires in 30 mins independent from config settings login#178