Skip to content

Releases: sensational/sassphp

sassphp-0.5.0

19 Jul 11:50
v0.5.0
5e4746b
Compare
Choose a tag to compare
  • Update Libsass to 3.6.1
  • Add support for PHP7+
  • Add support for custom functions written in PHP
  • Add support for custom inmporters written in PHP

sassphp-0.2.1

18 May 14:21
v0.2.1
Compare
Choose a tag to compare

sassphp now tracks libsass v3.2.2. This is the first release that is somewhat recommended for public use. Compared to earlier commits that didn't have a named version assoicated with, this fixes two important
potential security issues:

  • in previous states, it was possible to overflow an internal buffer by telling sassphp to compile a non-existing file with a long name.

    Unless you have let sassphp compile user-supplied paths, this won't affect you.

  • due to libsass unexpectedly freeing a buffer passed to it, when compiling a SASS string using sassphp, a buffer was freed twice. This is a classic double-free issue for which currently no known exploit exists.