Zend Framework 2 v2.3.5 Release Notes
Release Date: 2015-02-18 // about 9 years ago-
- ๐ 6666: bugfix : options can't be passed to SeparatorToSeparator via PluginManager
- 6676: Respecting line endings in AnnotationScanner
- 7005: Zend\Http\PhpEnvironment\Request omits query string
- 7127: SessionManagerFactory with ArrayStorage triggers undefined variable
- ๐ 7134: classmap_generator Deprecated: preg_replace():
- ๐ 7135: Fixing deprecated preg_replace usage in classmap_generator.php
- 7137: Request from string
- 7139: Fixing comment about email validator, when should be uri
- ๐ง 7142: AbstractConfigFactory returns complete configuration array at first config call
- ๐ 7144: hotfix/#7142: AbstractConfigFactory now returns requested config array
- 7148: ModuleLoader not capable of loading modules contained within an application.phar
- ๐ 7150: Estonian IDN definition & fixed binary code for HOST_DNS_OR_IPV4_OR_IPV6_OR_REGNAME
- ๐ฆ 7151: Applications packaged as not capable of loading modules contained within the archive
- ๐ป 7157: Exception message in Zend\Stdlib\AbstractOptions should use the actual used setter
- 7162: Incorrect response for HTTP status code 414
- 7167: Fixation form collection helper lost second argument
- 7168: Typo in #6598 pull request.
- ๐ 7169: bugfix : options can't be passed to SeparatorToSeparator
- ๐ 7170: Fixed wrong phpdoc type hint.
- 7180: Fix: Inline variable
- ๐ 7200: Add support for DateTimeImmutable
โก๏ธ SECURITY UPDATES
- ZF2015-02:
Zend\Db\Adapter\Platform\Postgresql
was incorrectly using\\
to escape double quotes in identifiers and values, which could lead to SQL injection vectors. We have provided patches that use proper escaping. If you use Postgresql with Zend Framework 2, we recommend upgrading immediately.