Twig 4.0 makes macros strict: required arguments, explicit variadic arguments, mandatory parentheses, and clear errors instead of silently broken output.
August 6, 2026
#Twig
❤️ 6
👍 2
🚀 4
Twig 4.0 isolates untrusted templates in a dedicated environment.
August 5, 2026
#Twig
❤️ 2
👍 1
🚀 1
Twig 3.28.0 improves syntax error reporting with column numbers, revives dynamic macro calls through the dot operator, and refines the sandbox.
July 3, 2026
#Twig
❤️ 3
Twig 4.0 replaces the getOperators() array with expression parser classes, all driven by one small and beautiful parsing algorithm.
June 17, 2026
#Twig
❤️ 5
👍 3
🚀 4
Twig 4.0 closes the sandbox blind spots: tests are now checked, silent exceptions are gone, and safe callables can be marked always allowed.
June 15, 2026
#Twig
👍 6
🚀 2
For Twig 4.0, I rebuilt the whole loop machinery: loop.last now works with any iterator, new helpers replace the bookkeeping code we have all written a hundred times, the if condition makes a comeback, and recursive loops become a first-class feature.
June 11, 2026
#Twig
❤️ 20
👍 6
🚀 8
🎉 7
Sandbox filter, tag and function allow-list bypass when sandbox state changes between renders for a cached `Template`
May 27, 2026
#Twig
Sandbox `__toString()` policy bypass via dynamic mapping keys
May 27, 2026
#Twig
Sandbox state regression in deprecated internal wrappers in `src/Resources/core.php`
May 27, 2026
#Twig