Skip to content

Releases: thorsten/phpMyFAQ

4.1-nightly-2026-05-17

17 May 03:02

Choose a tag to compare

Pre-release
feat: added missing translation strings

development-nightly-2026-05-17

17 May 03:15

Choose a tag to compare

Pre-release
feat: added missing translation strings

4.1-nightly-2026-05-16

16 May 03:01

Choose a tag to compare

Pre-release
fix: escape gravatarUrl in client-side comment rendering

Escape commentData.gravatarUrl with escapeHtml() before interpolating it
into the comment img src attribute, matching how the username is already
handled. The URL is server-generated so this is hardening for
consistency rather than a fix for an exploitable issue.

Document why insertAdjacentHTML is safe here (escaped username/URL,
server-sanitized comment body) and annotate the line for the scanner.

development-nightly-2026-05-16

16 May 03:13

Choose a tag to compare

Pre-release
fix: escape gravatarUrl in client-side comment rendering

Escape commentData.gravatarUrl with escapeHtml() before interpolating it
into the comment img src attribute, matching how the username is already
handled. The URL is server-generated so this is hardening for
consistency rather than a fix for an exploitable issue.

Document why insertAdjacentHTML is safe here (escaped username/URL,
server-sanitized comment body) and annotate the line for the scanner.

4.1-nightly-2026-05-15

15 May 03:02

Choose a tag to compare

Pre-release
Merge branch '4.1' into 'main'

development-nightly-2026-05-15

15 May 03:16

Choose a tag to compare

Pre-release
Merge branch '4.1' into 'main'

4.1-nightly-2026-05-14

14 May 03:02

Choose a tag to compare

Pre-release
build(deps-dev): bump phpunit/phpunit from 13.1.8 to 13.1.9

Bumps [phpunit/phpunit](https://github.com/sebastianbergmann/phpunit) from 13.1.8 to 13.1.9.
- [Release notes](https://github.com/sebastianbergmann/phpunit/releases)
- [Changelog](https://github.com/sebastianbergmann/phpunit/blob/13.1.9/ChangeLog-13.1.md)
- [Commits](https://github.com/sebastianbergmann/phpunit/compare/13.1.8...13.1.9)

---
updated-dependencies:
- dependency-name: phpunit/phpunit
  dependency-version: 13.1.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

development-nightly-2026-05-14

14 May 03:14

Choose a tag to compare

Pre-release
build(deps-dev): bump phpunit/phpunit from 13.1.8 to 13.1.9

Bumps [phpunit/phpunit](https://github.com/sebastianbergmann/phpunit) from 13.1.8 to 13.1.9.
- [Release notes](https://github.com/sebastianbergmann/phpunit/releases)
- [Changelog](https://github.com/sebastianbergmann/phpunit/blob/13.1.9/ChangeLog-13.1.md)
- [Commits](https://github.com/sebastianbergmann/phpunit/compare/13.1.8...13.1.9)

---
updated-dependencies:
- dependency-name: phpunit/phpunit
  dependency-version: 13.1.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

4.1-nightly-2026-05-13

13 May 03:02

Choose a tag to compare

Pre-release
refactor: updated formatting due to Mago changes

4.1-nightly-2026-05-12

12 May 03:02

Choose a tag to compare

Pre-release
refactor: updated formatting due to Mago changes