verbb/base

Changed

• Twig sandbox now allows methods/properties on safe Craft value objects by class family (ElementInterface, ElementQueryInterface, ElementCollection, DateTimeInterface, Illuminate Enumerable), instead of requiring plugins to whitelist every method name.
• Added allowedClasses support to SecurityPolicy / Templates (merged with the defaults above).
• Honour Craft’s #[AllowedInSandbox] attributes when present.

Fixed

• Fixed legitimate element-query usage in sandboxed templates (e.g. {{ fieldHandle.one().title }}) being blocked after the 3.0.10 allow-list enforcement.

Changed

• Twig sandbox now allows methods/properties on safe Craft value objects by class family (ElementInterface, ElementQueryInterface, ElementCollection, DateTimeInterface, Illuminate Enumerable), instead of requiring plugins to whitelist every method name.
• Added allowedClasses support to SecurityPolicy / Templates (merged with the defaults above).
• Honour Craft’s #[AllowedInSandbox] attributes when present.

Fixed

• Fixed legitimate element-query usage in sandboxed templates (e.g. {{ fieldHandle.one().title }}) being blocked after the 3.0.10 allow-list enforcement.

Fixed

• Fixed object templates escaping HTML variables, outputting them as plain text. Craft 5.10.13 no longer normalises shorthand tags ({someVar}) with the raw filter, relying on the escaper strategy being disabled while rendering instead.
• Aligned renderString() with Craft’s default of not auto-escaping HTML (optional $escapeHtml flag to opt in).

Fixed

• Fixed object templates escaping HTML variables, outputting them as plain text. Craft 5.10.13 no longer normalises shorthand tags ({someVar}) with the raw filter, relying on the escaper strategy being disabled while rendering instead.
• Aligned renderString() with Craft’s default of not auto-escaping HTML (optional $escapeHtml flag to opt in).

Changed

• Respect Craft Monolog target config for Verbb plugin logs.

Changed

• Respect Craft Monolog target config for Verbb plugin logs.

Changed

• Allow safe model and element properties in sandboxed templates.

Changed

• Allow safe model and element properties in sandboxed templates.

Fixed

• Enforce Twig sandbox method/property allow-lists in SecurityPolicy.

Fixed

• Enforce Twig sandbox method/property allow-lists in SecurityPolicy.

Added

• Add CachedElementQuery class for some plugins and element query caching.

Added

• Add CachedElementQuery class for some plugins and element query caching.

Added

• Add plugin settings and general layouts for easier consistency in plugins.

Added

• Add plugin settings and general layouts for easier consistency in plugins.

Fixed

• Fix an error on Craft 5.7+.

Fixed

• Fix an error when calling self::$plugin for modules or plugins that don’t define this property.

Fixed

• Fix an incompatibility with Craft 5.5.0+.

Added

• Add proxyField macro to simplify translating field instructions with variables.
• Add Locale-switching helper function to assist with rendering strings in a given language or locale.

Added

• Allow more Twig functions/filters.

Added

• Add support for Closure module and add collect to allowed Twig functions.

Fixed

• Fix an error when parsing templates.

Added

• Add GlobalsExtension and StringLoaderExtension to template parser.

Changed

• Loosen template security policy to allow methods and properties.

Added

• Add support for Craft and plugin Twig extensions in allowed Twig.
• Add ArrayHelper::filterNullFalse().

Changed

• Now requires PHP 8.2.0+.
• Now requires Craft 5.0.0+.

Changed

• Twig sandbox now allows methods/properties on safe Craft value objects by class family (ElementInterface, ElementQueryInterface, ElementCollection when available, DateTimeInterface, Illuminate Enumerable), instead of requiring plugins to whitelist every method name.
• Added allowedClasses support to SecurityPolicy / Templates (merged with the defaults above).
• Honour Craft’s #[AllowedInSandbox] attributes when present (Craft 4.17+).

Fixed

• Fixed legitimate element-query usage in sandboxed templates (e.g. {{ fieldHandle.one().title }}) being blocked after the 2.0.11 allow-list enforcement.

Changed

• Allow safe model and element properties in sandboxed templates.

Fixed

• Enforce Twig sandbox method/property allow-lists in SecurityPolicy.

Fixed

• Fix an incompatibility with Craft 4.13.0+.

Added

• Add proxyField macro to simplify translating field instructions with variables.

Added

• Allow more Twig functions/filters.

Added

• Add support for Closure module and add collect to allowed Twig functions.

Fixed

• Fix an error when parsing templates.

Added

• Add GlobalsExtension and StringLoaderExtension to template parser.

Changed

• Loosen template security policy to allow methods and properties.

Added

• Add support for Craft and plugin Twig extensions in allowed Twig.

Added

• Add Templates service for easy cut-down, safe Twig string rendering.

Added

• Add ability to set Monolog target options.

Added

• Add vuiGetValue() as a Twig function for ArrayHelper::getValue().

Fixed

• Fix tabs support.

Fixed

• Fix an error by checking if a dispatcher actually exists before setting its targets. (thanks @boboldehampsink).

Changed

• Switch to Monolog for logging.
• Craft 4 upgrade.

Fixed

• Fix credits css.

Fixed

• Fix sidebar tabs not working in some instances, and make fully accessible.

Fixed

• Fix file logging initializing too early before Craft has been bootstrapped.

Added

• Add file logging helper.

Changed

• Lower Craft requirement.

Changed

• Craft 3 upgrade.