Skip to content

PHPMailer 6.8.1
Compare
Choose a tag to compare
@Synchro Synchro released this 29 Aug 08:39
· 103 commits to master since this release
v6.8.1
e88da8d
This commit was signed with the committer’s verified signature.
Synchro Marcus Bointon
GPG key ID: DE31CD6EB646AA24
Learn about vigilant mode.

This is a minor maintenance release.

Minor security note

The DSN support added in 6.8.0 reflects the DSN back to the user in an error message if it is invalid. If a DSN uses user-supplied input (a very bad idea), it opens a distant possibility of XSS if the host app does not escape output. In an abundance of caution, malformed DSNs are no longer reflected in error messages.

Changes

  • Don't reflect malformed DSNs in error messages to avert any risk of XSS
  • Improve Simplified Chinese, Sinhalese, and Norwegian translations
  • Don't use setAccessible in PHP >= 8.1 in tests
  • Avoid a deprecation notice in PHP 8.3
  • Fix link in readme
Assets 2