From ebf2646c347b941e63709f7e69ab79416f6d5124 Mon Sep 17 00:00:00 2001 From: Taylor Otwell Date: Tue, 16 Feb 2021 10:58:28 -0600 Subject: [PATCH 1/3] wip --- database/factories/UserFactory.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/database/factories/UserFactory.php b/database/factories/UserFactory.php index 99dfdcb6..3510ed67 100644 --- a/database/factories/UserFactory.php +++ b/database/factories/UserFactory.php @@ -32,7 +32,7 @@ public function definition() } /** - * Define the model's unverified state. + * Indicate that the model's email address should be unverified. * * @return \Illuminate\Database\Eloquent\Factories\Factory */ From f0de9fd9967d4e1b4427d8458bf8983bc2cde201 Mon Sep 17 00:00:00 2001 From: Hugo Clarke-Wing <7689302+clarkewing@users.noreply.github.com> Date: Fri, 19 Feb 2021 16:09:51 +0100 Subject: [PATCH 2/3] Don't flash 'current_password' input (#5541) * Don't flash `current_password` input With starter packs like Jetstream, the `current_password` input is used. I believe that adding `current_password` to the `$dontFlash` list by default would help to ensure new projects follow security best practices from the get-go. * Update Handler.php Co-authored-by: Taylor Otwell --- app/Exceptions/Handler.php | 1 + 1 file changed, 1 insertion(+) diff --git a/app/Exceptions/Handler.php b/app/Exceptions/Handler.php index f9644add..c18c43cc 100644 --- a/app/Exceptions/Handler.php +++ b/app/Exceptions/Handler.php @@ -22,6 +22,7 @@ class Handler extends ExceptionHandler * @var array */ protected $dontFlash = [ + 'current_password', 'password', 'password_confirmation', ]; From 06d967a4c72be2ec71a0efd89cc2a3c113cf6da5 Mon Sep 17 00:00:00 2001 From: Dries Vints Date: Tue, 23 Feb 2021 21:43:02 +0100 Subject: [PATCH 3/3] Update CHANGELOG.md --- CHANGELOG.md | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index e8365d68..5c037b49 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,6 +1,12 @@ # Release Notes -## [Unreleased](https://github.com/laravel/laravel/compare/v8.5.10...8.x) +## [Unreleased](https://github.com/laravel/laravel/compare/v8.5.11...8.x) + + +## [v8.5.11 (2021-02-23)](https://github.com/laravel/laravel/compare/v8.5.10...v8.5.11) + +### Fixed +- Don't flash 'current_password' input ([#5541](https://github.com/laravel/laravel/pull/5541)) ## [v8.5.10 (2021-02-16)](https://github.com/laravel/laravel/compare/v8.5.9...v8.5.10)