Automatic Entity Label Release Notes

Notes

This is the initial NES release of the Automatic Entity Label module.

Changes

• Security: Insert token values into PHP label patterns as data, so user input in a token is never executed as PHP.
• Security: Skip PHP label patterns and log an error when the PHP tokenizer extension is not available.
• Security: Refuse PHP label patterns that use a token as a function, variable, property or class name.
• Security: Refuse PHP label patterns that put a token right after a backslash inside a PHP string.
• Testing: Add coverage for token values in PHP strings, heredocs, comments, backticks, names, backslashes and comment subjects.

Download: https://registry.nes.herodevs.com/composer/pkg/neverendingsupport/auto_entitylabel/7.1.5+7.1.4:auto_entitylabel/release.zip