Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
qosha1
/
grav
Public
forked from
getgrav/grav
Notifications
You must be signed in to change notification settings
Fork
0
Star
0
Code
Pull requests
0
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Pull requests
Actions
Projects
Security and quality
Insights
Commits
Branch selector
develop
User selector
All users
Datepicker
All time
Commit history
Commits on Aug 10, 2026
Update find/sort func tests for the sandbox-flag signature
Show description for 78468c4
rhukster
committed
78468c4
View commit details
Copy full SHA for 78468c4
Browse repository at this point
Merge branch 'security/p6qj-sort-sandbox' into develop
Show description for 4036458
rhukster
committed
4036458
View commit details
Copy full SHA for 4036458
Browse repository at this point
Merge branch 'fix/admin-next-16-scheduler-proc-open' into develop
rhukster
committed
c731eaa
View commit details
Copy full SHA for c731eaa
Browse repository at this point
[security] Restore the Twig sandbox flag on the sort and find filters
Show description for 893d370
rhukster
committed
893d370
View commit details
Copy full SHA for 893d370
Browse repository at this point
Keep the Scheduler working when proc_open is disabled
Show description for 1a83473
rhukster
committed
1a83473
View commit details
Copy full SHA for 1a83473
Browse repository at this point
Commits on Aug 7, 2026
Merge tag '2.0.17' into develop
rhukster
committed
02b0428
View commit details
Copy full SHA for 02b0428
Browse repository at this point
Merge branch 'release/2.0.17'
rhukster
committed
d7bfcb5
View commit details
Copy full SHA for d7bfcb5
Browse repository at this point
Require dom-sanitizer 1.0.13 (GHSA-ww22-4mqv-x5w3)
rhukster
committed
968a2ec
View commit details
Copy full SHA for 968a2ec
Browse repository at this point
Merge tag '2.0.16' into develop
rhukster
committed
af3c3ec
View commit details
Copy full SHA for af3c3ec
Browse repository at this point
Merge branch 'release/2.0.16'
rhukster
committed
804731d
View commit details
Copy full SHA for 804731d
Browse repository at this point
Read account-form group options via UserGroupObject, retiring deprecated Group::groupNames()
rhukster
committed
4b69c21
View commit details
Copy full SHA for 4b69c21
Browse repository at this point
updated vendor libs
Show description for 276acbf
rhukster
committed
276acbf
View commit details
Copy full SHA for 276acbf
Browse repository at this point
Commits on Aug 6, 2026
Merge branch 'security/q8w8-scheduler-lockfile' into develop
rhukster
committed
0c58668
View commit details
Copy full SHA for 0c58668
Browse repository at this point
[security] Keep scheduler job locks inside the install (GHSA-q8w8-6cq5-j4h2)
Show description for 9d4c5b3
rhukster
committed
9d4c5b3
View commit details
Copy full SHA for 9d4c5b3
Browse repository at this point
Merge branch 'security/jq29-media-path-containment' into develop
rhukster
committed
a9667f5
View commit details
Copy full SHA for a9667f5
Browse repository at this point
[security] Validate the whole media path, not just the basename (GHSA-jq29-c7v8-rg55)
Show description for f6883ed
rhukster
committed
f6883ed
View commit details
Copy full SHA for f6883ed
Browse repository at this point
Merge branch 'security/47ch-media-directory-containment' into develop
rhukster
committed
c6744e9
View commit details
Copy full SHA for c6744e9
Browse repository at this point
[security] Contain media_directory() to the Grav install (GHSA-47ch-6w46-6xm7)
Show description for a600f2a
rhukster
committed
a600f2a
View commit details
Copy full SHA for a600f2a
Browse repository at this point
Merge branch 'fix/media-remove-pattern-anchor' into develop
rhukster
committed
ebae96e
View commit details
Copy full SHA for ebae96e
Browse repository at this point
Anchor the media cleanup pattern so a delete cannot sweep a neighbouring file
Show description for ad6dbd5
rhukster
committed
ad6dbd5
View commit details
Copy full SHA for ad6dbd5
Browse repository at this point
update dom-sanitizer
Show description for c45db88
rhukster
committed
c45db88
View commit details
Copy full SHA for c45db88
Browse repository at this point
Commits on Aug 5, 2026
Merge branch 'security/p597-sandbox-config-vars' into develop
rhukster
committed
8dae1c6
View commit details
Copy full SHA for 8dae1c6
Browse repository at this point
[security] Filter system/site/theme in sandboxed Twig renders (GHSA-p597-crqc-m349)
Show description for 6d37af2
rhukster
committed
6d37af2
View commit details
Copy full SHA for 6d37af2
Browse repository at this point
Correct the 2.0.16 changelog entry for the retired content XSS output scan
Show description for 77a52a6
rhukster
committed
77a52a6
View commit details
Copy full SHA for 77a52a6
Browse repository at this point
Drop the $scanXss param tag left behind when the scan moved to save time (#4231)
Show description for 3c0d3cb
darkdi
authored
3c0d3cb
View commit details
Copy full SHA for 3c0d3cb
Browse repository at this point
Commits on Aug 4, 2026
Merge branch 'fix/referrer-route-language-match' into develop
Show description for 4895ef3
rhukster
committed
4895ef3
View commit details
Copy full SHA for 4895ef3
Browse repository at this point
Merge branch 'security/9ccq-referrer-origin-anchor' into develop
Show description for 02af81f
rhukster
committed
02af81f
View commit details
Copy full SHA for 02af81f
Browse repository at this point
Merge branch 'security/38p6-nonce-hash-equals' into develop
rhukster
committed
b9ec8e0
View commit details
Copy full SHA for b9ec8e0
Browse repository at this point
Match the site root in Pages::referrerRoute() language lookup
rhukster
committed
bf7e119
View commit details
Copy full SHA for bf7e119
Browse repository at this point
[security] Anchor referrer origin checks on a path separator (GHSA-9ccq-2jfg-qw33)
rhukster
committed
1b26aa8
View commit details
Copy full SHA for 1b26aa8
Browse repository at this point
[security] Constant-time nonce comparison in Utils::verifyNonce() (GHSA-38p6-h87p-r4cg)
rhukster
committed
a076b90
View commit details
Copy full SHA for a076b90
Browse repository at this point
Merge branch 'security/gh8j-emailvar-sandbox' into develop
rhukster
committed
0ae9698
View commit details
Copy full SHA for 0ae9698
Browse repository at this point
[security] Sandbox the Email plugin's form-action Twig (GHSA-gh8j-q67c-j53f)
Show description for 202752e
rhukster
committed
202752e
View commit details
Copy full SHA for 202752e
Browse repository at this point
Commits on Aug 3, 2026
Merge branch 'release/2.0.15'
rhukster
committed
d5f89d9
View commit details
Copy full SHA for d5f89d9
Browse repository at this point
Merge tag '2.0.15' into develop
rhukster
committed
c2b4686
View commit details
Copy full SHA for c2b4686
Browse repository at this point
Previous
Next
You can’t perform that action at this time.