What’s Changed
This is the biggest release since v4.0.
Is release is focused on Validator and FormRequest classes and provides best-in-class type infer for them.
Features
- Improve stub type precision across Eloquent, Collections, Query Builder, and helpers to narrow down types (#583) @alies-dev
- Add validation-aware type narrowing and taint analysis for
FormRequest(#577) @alies-dev - 🛡️ Add taint-sink sql annotations for SQL identifiers and table names (#582) @alies-dev
- 🛡️ Add taint sinks for
View\FactoryandView\Viewmethods (#580) @alies-dev - 🛡️ Add taint escape annotations for
Js::from()andJs::encode()(#573) @alies-dev - 🛡️ Add taint sources for session data retrieval (
Session\Store::get()and other) (#557) @alies-dev - 🛡️ Add taint sinks for HTTP client SSRF and redirect methods (#555) @alies-dev
- 🛡️ Add taint sinks for
MailandNotificationclasses (#556) @alies-dev
Fixes
- Remove false-positive taint source from
Request::integer()andRequest::float()(#575) @alies-dev
Full Changelog: v4.3.2...v4.4.0