Problem/Motivation
#2489024: Arbitrary code execution via 'trans' extension for dynamic twig templates (when debug output is on) removed twig debug output from trans due to arbitrary PHP execution in the debug output. We should find a secure way to add this back.
Proposed resolution
Figure it out in a secure way. Add tests for security.
Remaining tasks
Discuss. Add tests.
User interface changes
None.
API changes
None.
Data model changes
None.
Comments