Search results

ValidWizard::isSubmitted() bypasses CSRF validation

php

type: bug

Status: Open.

Bug

#208 In validformbuilder/validformbuilder;

· rvanbaalen opened on Jun 10, 2026

ValidForm::unserialize() uses PHP unserialize() without allowed_classes whitelist

php

type: bug

Status: Open.

Bug

#207 In validformbuilder/validformbuilder;

· rvanbaalen opened on Apr 10, 2026

Stray double-quote in simple-layout div tag (File, Group, Password)

php

type: bug

Status: Open.

Bug

#205 In validformbuilder/validformbuilder;

· rvanbaalen opened on Apr 10, 2026

Page constructor does not store $meta — getMeta() and getShortHeader() always return defaults

php

type: bug

Status: Open.

Bug

#204 In validformbuilder/validformbuilder;

· rvanbaalen opened on Apr 10, 2026

Hidden::isValid($intCount) silently ignores the $intCount parameter

php

type: bug

Status: Open.

Bug

#203 In validformbuilder/validformbuilder;

· rvanbaalen opened on Apr 10, 2026

File upload validation constraints (maxFiles, maxSize, fileTypes) are silently ignored

php

type: bug

Status: Open.

Bug

#201 In validformbuilder/validformbuilder;

· rvanbaalen opened on Apr 10, 2026

Cover code base with PHPUnit tests

Status: Open.

#161 In validformbuilder/validformbuilder;

· rvanbaalen opened on Mar 6, 2025

Only allow officially supported button types

Feature Request

Status: Open.

Feature

#159 In validformbuilder/validformbuilder;

· rvanbaalen opened on Feb 27, 2025

setConditions() is an undocumented public method on the Base class and should be marked as deprecated / removed

needs: discussion

Status: Open.

#157 In validformbuilder/validformbuilder;

· rvanbaalen opened on Jan 30, 2025

·  

Next Release

Unexpected behavior in Area getValue() method

needs: discussion

type: bug

Status: Open.

Bug

#153 In validformbuilder/validformbuilder;

· rvanbaalen opened on Jan 30, 2025