Yii Framework Change Log ======================== Version 1.1.27 November 21, 2022 -------------------------------- - Bug: PHP 8.1 compatibility: Fix CFileCache call of file_get_contents (Bregi) - Bug: CVE-2022-41922. Prevent RCE when deserializing untrusted user input (fi3wey, marcovtwout) Version 1.1.26 September 30, 2022 -------------------------------- - Enh #4386: Added support for PHP 8.1 (marcovtwout, JonathanArgentao, ivany4, csears123) - Enh #4386: Updated HTMLPurifier to version 4.15.0 for PHP 8.1 support (https://github.com/ezyang/htmlpurifier/blob/v4.15.0/NEWS) (marcovtwout) - Enh #4392: Added support for SSL to CRedisCache (andres101) - Bug #4453: Alpine Linux compatibility: Avoid using `GLOB_BRACE` in `CFileHelper::removeDirectory` (ivany4) Version 1.1.25 December 13, 2021 -------------------------------- - Bug #4226: Fix for Gii diff displaying "reset() expects parameter 1 to be array, integer given" (LeoZandvliet, marcovtwout) - Bug #4369: PHP 8.0 compatibility: Fix warning "Only the first byte will be assigned to the string offset" when generating code with Gii (marcovtwout) - Bug #4374: Fix for createUpdateCommand which did not accept just a table name when using MSSQL (c-schmitz) - Bug #4380: Prevent fatal errors while validating CSRF token of malformed requests (rob006) - Bug #4382: PHP 8.0 compatibility: Fix CFileLogRoute throwing TypeError when logfile cannot be opened (marcovtwout) Version 1.1.24 June 7, 2021 -------------------------------- - Bug #4339: "There is no active transaction" when transaction is autocommitted (twisted1919) - Bug #4343: Fix "driver does not support quoting" when using the driver pdo_odbc (xpohoc69) - Bug #4355: Fix errorhandler missing backtrace entries (georaldc, marcovtwout) - Enh #4349: Added CHtml option to omit type attribute from