262 Commits (06f10a7eb16d2cdc86cc80f0c0f77fcaa4fdbf2f)

Author	SHA1	Message	Date
Ambrose Casanova	9491b93951	feat: drive view path containment via flight.views.restrict_to_path ... Expose the opt-in as a Flight::set() key in the flight.views.* family. Engine applies it to View::$restrictToPath when the view is created, same as path and extension. Default remains false.	3 days ago
Ambrose Casanova	eac9fef021	feat: make view path containment opt-in with View::$restrictToPath ... Restore getTemplate() and its existing test exactly as on master. Default behavior is unchanged: absolute paths still render and exists() never throws. With restrictToPath on, render(), fetch() and exists() only accept files that resolve inside the views path. A blocked file has its own error message, separate from "not found".	3 days ago
Ambrose Casanova	8093a18fb3	fix: reject Windows view paths that leave the views directory ... Normalize both separators before the containment check, and build the regression next to the views directory so it stays on the same drive.	4 days ago
Ambrose Casanova	63e5bcd613	fix: keep view templates inside the views directory ... Reject absolute template paths and any resolved path outside the configured views directory.	4 days ago
n0nag0n	24640dcbcb	Merge pull request #727 from flightphp/fix-726-fetchfield-null ... fix: return false from fetchField on empty result	1 month ago
Ambrose Casanova	9681cd20c8	test: tolerate PDO numeric strings on PHP < 8.1 ... assertEquals for integer-ish fetchField values; keep assertSame for false / empty string and assertNull for SQL NULL.	1 month ago
Ambrose Casanova	386bdc16a7	test: cover fetchField null vs empty vs 0 vs '' ... Distinguish empty result sets (false) from SQL NULL columns (null), and keep 0 / '' as assertSame on both PdoWrapper and SimplePdo.	1 month ago
Ambrose Casanova	e42c7848c4	fix: return false from fetchField on empty result ... SimplePdo::fetchRow() returns null when there are no rows. Guard PdoWrapper::fetchField() so empty queries return false instead of calling getData() on null. Closes #726.	1 month ago
Ambrose Casanova	6b8d2f9880	fix: escape single quotes in View::e() ... Pass ENT_QUOTES|ENT_SUBSTITUTE and UTF-8 to htmlentities so single-quoted attributes are escaped on PHP 7.4/8.0 as well as 8.1+.	1 month ago
Ambrose Casanova	13af0cb63c	Do not add the package root to Loader::$dirs under Composer. ... files autoload still registers Loader::autoload() so Flight::path() works. Composer PSR-4 already loads flight\*. Reset leftover path() dirs in AutoloadTest so LoaderTest can assert the exact list.	1 month ago
Ambrose Casanova	2880142083	Restore Flight::path() autoloading after the 3.19 autoload rework. ... PR 709 dropped the Composer files entry for flight/autoload.php and that file returned early when vendor/autoload.php existed, so Loader::autoload() never registered. path() still added directories; namespaced app classes never loaded. Upgrades must not break that.	1 month ago
n0nag0n	d8fe78449c	Fix flight.allow_method_override not disabling method override (GHSA-vr9m-jx6f-hhj6) ... Assign Request::$allowMethodOverride on the class before any Request is built, so the constructor does not cache an overridden verb while the static still defaults to true. When override is disabled and an override header or _method field is present, recompute the cached request method so early Flight::request() access cannot keep a spoofed DELETE/PUT/PATCH. Add regression tests for the Engine start path, early request construction, _method, and intentional manual method assignment without override input.	2 months ago
n0nag0n	98c9c89893	Align Runway generators with skeleton App\ layout and fix suite gates ... make:controller now generates App\Controller under app/Controller/, and ai:generate-instructions writes only AGENTS.md with Twig/SimplePdo conventions. Clear a stale PHPStan baseline entry and resolve PHPCS issues so multi-PHP tests/phpstan/phpcs pass cleanly.	2 months ago
n0nag0n	53d422001e	feat(ai): generate AGENTS.md in ai:generate-instructions command ... Also write project AI instructions to AGENTS.md alongside the existing copilot, cursor, gemini, and windsurf output files.	3 months ago
copilot-swe-agent[bot]	46e457f9c5	Merge master into autoload-rework	4 months ago
fadrian06	770d246e29	Potential fix for pull request finding ... Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>	4 months ago
fadrian06	ee9b5f2082	reset v2ClassLoading	4 months ago
fadrian06	8ec68173ce	validate ->setAccesible	4 months ago
fadrian06	47a3702927	refactor LoaderTest	4 months ago
fadrian06	85d2f82f77	autoload reworked ... - removed autoload-dev.classmap - normalize Tests/* namespace to tests - rename tests/server-v2 to tests/server_v2 - remove tests/phpunit_autoload.php - update tests files namespaces - update tests/server/index.php and tests/server_v2/index.php to use composer autoloader - extract tests/server_v2/AuthCheck.php	4 months ago
fadrian06	760ac1a858	composer format	4 months ago
fadrian06	4e8402ece0	Fix pdoexception message in php8.0 in windows	4 months ago
fadrian06	a8de8d3914	Fix testRenderLayout in windows	4 months ago
fadrian06	8b5118b791	Fix another endlines problems with windows	4 months ago
copilot-swe-agent[bot]	76aaf5e274	Fix Windows CI failure in testGetRoutes: replace both \\r\\n and \\n newlines ... On Windows, PHP_EOL is \\r\\n but the CLI library writes \\n to the output file. The removeColors() helper converts \\r\\n→\\n, so using str_replace(PHP_EOL, '') afterwards failed to strip those \\n on Windows, leaving newlines in the haystack while the needle had none. Fix: replace both \\r\\n and \\n so all newline variants are stripped from both needle and haystack before comparison, making the test platform-independent.	4 months ago
fadrian06	237d567373	fix: symlink(): Permission denied on WINNT	4 months ago
n0nag0n	60bf7921f2	Throw when middleware class is missing or cannot be resolved ... String middleware classes that do not exist or fail container resolution are now validated at request time, matching route handler behavior. Middleware that only implements one phase (before/after) continues to be skipped for the other phase. Fixes #696	4 months ago
KnifeLemon	02fe881d27	fix wildcard routes being skipped by fast path method lookup closes #693 ... Co-authored-by: Copilot <copilot@github.com>	6 months ago
n0nag0n	924f231baa	security fixes	6 months ago
fadrian06	ce753b7cd2	implement Tests\Server, ServerV2 and groupcompactsyntax namespaces	7 months ago
fadrian06	08904df138	ignore namespaces phpcs warning	7 months ago
fadrian06	b55540068e	fix almost long lines phpcs warnings	7 months ago
fadrian06	29595ef9e1	composer exec phpcbf -- --standard=PSR2	7 months ago
fadrian06	85c4b38858	apply lsp-intelephense format to tests folder	7 months ago
fadrian06	5a4f13b8d8	fix all tests in windows	7 months ago
Mr Percival	a3f47bc902	Ignore LiMIT when using RETURNING	9 months ago
n0nag0n	dd39d4adad	fixed spacing	9 months ago
n0nag0n	ff17dd591d	Added SimplePdo class to replace PdoWrapper	9 months ago
Arshid	a59829d8fd	Add return type - tests	9 months ago
n0nag0n	888ff46d26	Fixed route and controller commands to accept old configs	9 months ago
n0nag0n	b9818ea27b	ok, so only for php 7.4 and 8...	9 months ago
n0nag0n	9cc9347e2b	Merge branch 'update-ai-commands' of https://github.com/flightphp/core into update-ai-commands	9 months ago
n0nag0n	e73b4e3f92	Removed useless method	9 months ago
n0nag0n	175e9eb656	Merge branch 'master' into update-ai-commands	9 months ago
n0nag0n	009f2f9bad	Fix AI commands to use new runway config syntax	9 months ago
yangzhi-rao	8b047021fe	update route tests	10 months ago
n0nag0n	b174bdbc6f	more changes with upload. Security enhancements. Also got rid of php-watcher	12 months ago
n0nag0n	671fea075c	adjustments for security, 100% coverage and phpcs	12 months ago
KnifeLemon	82daf71d0a	Apply suggestions from code review ... Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>	12 months ago
KnifeLemon	106955a82e	add multipart parsing for PUT/PATCH/DELETE methods and comprehensive tests	12 months ago