Version 4.3.5

Release Date: May 21, 2023

4.3.5 release of CodeIgniter4

SECURITY
Changes
Deprecations
Bugs Fixed

SECURITY 

Remote Code Execution Vulnerability in Validation Placeholders was fixed. See the Security advisory GHSA-m6m8-6gq8-c9fj for more information.
Fixed that Session::stop() did not destroy the session. See Session Library for details.

Changes 

make:cell When creating a new cell, the controller would always have the Cell suffixed to the class name.
For the view file, the final _cell is always removed.
Cells For compatibility with previous versions, view filenames ending with _cell can still be
located by the Cell as long as auto-detection of view file is enabled (via setting the $view property to an empty string).

Deprecations 

Session: The Session::stop() method is deprecated. Use the Session::destroy() instead.

Bugs Fixed 

Validation: Fixed a bug where a closure used in combination with permit_empty or if_exist rules was causing an error.
make:cell Fixed generating view files as classes.
make:cell Fixed treatment of single word class input for case-insensitive OS.

See the repo’s CHANGELOG.md for a complete list of bugs fixed.