Repository navigation

fix(security): close SQL injection in tree sort, TV filters and identifier quoting - #2490

Merged

Seiger merged 5 commits into

evolution-cms:3.5.xfrom

elcreator:fix-key-sql-injections

Oct 7, 2026

Commits on Oct 7, 2026
- fix(security): close SQL injection in tree sort, TV filters and identifier quoting
  
  elcreator
  and
  claude
  committed
  f0a5c28
- fix(tests): make @FILE binding tests independent of the pinned EVO_BASE_PATH
  
  elcreator
  and
  claude
  committed
  8fe9fef
- fix(tests): start the discovery fixture through evoRunPhp
  
  elcreator
  and
  claude
  committed
  43c1d31
- fix(tests): run the pinned template controller test without PHPUnit process isolation
  
  elcreator
  and
  claude
  committed
  435d37c
- fix(security): cap TV filter and sort terms and validate getTemplateVars fields
  
  elcreator
  and
  claude
  committed
  86d8284