Vulnerabilities fixed
*Sourced from [The Sonatype OSS Index](https://ossindex.sonatype.org/vuln/e48cbf22-0f53-4e83-a545-da6e1a4bfbb2).*
> **CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')**
> The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
>
> Affected versions: >= 2.2.6, < 2.3.5
*Sourced from [The Sonatype OSS Index](https://ossindex.sonatype.org/vuln/e48cbf22-0f53-4e83-a545-da6e1a4bfbb2).*
> **CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')**
> The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
>
> Affected versions: < 2.3.5, >= 2.2.6
Changelog
*Sourced from [codeception/codeception's changelog](https://github.com/Codeception/Codeception/blob/2.5/CHANGELOG-2.5.md).*
> #### 2.5.3
>
> * [Db] cleanup database if populator is used
> * [FTP] Compatibility with phpseclib v2 by [**kardagan**](https://github.com/kardagan)
> * [JsonType] Fixed issue [#5230](https://github-redirect.dependabot.com/Codeception/Codeception/issues/5230) Dropped filters after a string:regex by [**ellisgl**](https://github.com/ellisgl)
> * [Symfony] Fixed persistent service functionality for Symfony 3 by [**Naktibalda**](https://github.com/Naktibalda)
> * [ZendExpressive] Set Cookie header in request by [**Naktibalda**](https://github.com/Naktibalda)
> * Updated vlucas/phpdotenv package to ^3.0 version by [**KartaviK**](https://github.com/KartaviK)
> * Documentation improvements by [**chrisaligent**](https://github.com/chrisaligent) [**richleland**](https://github.com/richleland) [**SanzhiyevMergen**](https://github.com/SanzhiyevMergen) [**sdlins**](https://github.com/sdlins)
>
>
> #### 2.5.2
>
> * [ZendExppressive] Support for Zend Expressive v3 by [**Naktibalda**](https://github.com/Naktibalda)
> * [ZendExppressive] Added options to reload application between tests and between requests by [**Naktibalda**](https://github.com/Naktibalda)
> * [Symfony] Fix "already initialized service", "reboot kernel issue" [#5262](https://github-redirect.dependabot.com/Codeception/Codeception/issues/5262) by [**gdmfx**](https://github.com/gdmfx)
> * {Yii2] Prevent NPE [#5259](https://github-redirect.dependabot.com/Codeception/Codeception/issues/5259) by [**SilverFire**](https://github.com/SilverFire)
> * [Db] isPopulated method was hidden by renaming to _isPopulated by [**Naktibalda**](https://github.com/Naktibalda)
> * [Db] don't clear database for empty dump by [**Slamdunk**](https://github.com/Slamdunk)
> * [AMQP] added methods `seeQueueIsEmpty`, `dontSeeQueueIsEmpty`, `seeNumberOfMessagesInQueue`, `scheduleQueueCleanup` method by [**kardagan**](https://github.com/kardagan)
> * [REST][PhpBrowser][Frameworks] Save page source as .fail.json or .fail.xml depending on content type, by [**freiondrej**](https://github.com/freiondrej)
> * [Doctrine2] Cleanup property works after on reconfigure [#5250](https://github-redirect.dependabot.com/Codeception/Codeception/issues/5250) by [**joelmedeiros**](https://github.com/joelmedeiros)
> * [JsonType] Allow to use : in regex filter ([#5273](https://github-redirect.dependabot.com/Codeception/Codeception/issues/5273)) by [**ellisgl**](https://github.com/ellisgl)
> * [WebDriver] Print curl error to debug output if WebDriver failed to connect [#5315](https://github-redirect.dependabot.com/Codeception/Codeception/issues/5315) by [**Naktibalda**](https://github.com/Naktibalda)
> * [Logger] Ignores empty context and extra fields, by [**siad007**](https://github.com/siad007)
> * [Recorder] Improved steps ignoring in Recorder extension with meta steps and annotations support [#5210](https://github-redirect.dependabot.com/Codeception/Codeception/issues/5210) by [**sspat**](https://github.com/sspat).
> * `[**dataProvider**](https://github.com/dataProvider)` works with yield/generators [#5271](https://github-redirect.dependabot.com/Codeception/Codeception/issues/5271) by [**burned42**](https://github.com/burned42)
> * Fixed issue ArrayContainsComparator do not Intersect correctly Empty expected nested array [#5303](https://github-redirect.dependabot.com/Codeception/Codeception/issues/5303) by [**malinink**](https://github.com/malinink)
> * Fixed issue of steps with mocked objects [#5163](https://github-redirect.dependabot.com/Codeception/Codeception/issues/5163) by [**dh9325**](https://github.com/dh9325)
> * Added Environment Name To Descriptor Unique Signatures [#5294](https://github-redirect.dependabot.com/Codeception/Codeception/issues/5294) by [**Tenzian**](https://github.com/Tenzian)
> * Run command: Added `--phpunit-xml` option, which produces xml report having the same structure as PhpUnit's [#5004](https://github-redirect.dependabot.com/Codeception/Codeception/issues/5004) by [**Naktibalda**](https://github.com/Naktibalda)
> * Bootstrap command: Changed namespace shortcut to `-s` [#5275](https://github-redirect.dependabot.com/Codeception/Codeception/issues/5275) by [**Naktibalda**](https://github.com/Naktibalda)
> * Improved the docs; by [**h311ion**](https://github.com/h311ion), [**gimler**](https://github.com/gimler), [**picass0**](https://github.com/picass0), [**josephzidell**](https://github.com/josephzidell)
>
>
> #### 2.5.1
>
> * Recorder extension improvements by [**OneEyedSpaceFish**](https://github.com/OneEyedSpaceFish). See [#5177](https://github-redirect.dependabot.com/Codeception/Codeception/issues/5177):
> * HTML layout improvements
> * Restructured tests to show nested output
> * file operation exceptions / log them without throwing exceptions
> * fix edge cases with file operations (too long wantTo, etc.)
> * the ability to automatically purge old reports (from previous runs)
> * display errors in the recorded page rather than saving it as error.png
> * the ability not to display any Unicode characters if ANSI only output is requested
> * the ability not to display any colors in output if no-colors is requested
> * the ability to change colors in the generated list based on configuration
> * [Db] Made `_loadDump` unconditional like it was in 2.4. Fixed [#5195](https://github-redirect.dependabot.com/Codeception/Codeception/issues/5195) by [**Naktibalda**](https://github.com/Naktibalda)
> * [Db] Allows to specify more than one dump file. See [#5220](https://github-redirect.dependabot.com/Codeception/Codeception/issues/5220) by [**Fenikkusu**](https://github.com/Fenikkusu)
> * [WebDriver] Added `waitForElementClickable` by [**FatBoyXPC**](https://github.com/FatBoyXPC)
> ... (truncated)
Commits
- [`19f0fe8`](https://github.com/Codeception/Codeception/commit/19f0fe845c0af5af2a6c094dc0df3a178a3fd5b0) Bumped version to 2.5.3
- [`9a40338`](https://github.com/Codeception/Codeception/commit/9a40338805cd00e8f7df9b7307cb9cae05c4e708) Updated changelog for 2.5.3 release
- [`d229911`](https://github.com/Codeception/Codeception/commit/d2299114c1bba6cd3d7b84d0469c4c154e53418c) [Db] cleanup database if populator is used ([#5358](https://github-redirect.dependabot.com/Codeception/Codeception/issues/5358))
- [`6ae3c16`](https://github.com/Codeception/Codeception/commit/6ae3c161175aa96c9e1675bf3c3d9cbead41acd7) Merge pull request [#5372](https://github-redirect.dependabot.com/Codeception/Codeception/issues/5372) from Codeception/symfony3-services
- [`37a7562`](https://github.com/Codeception/Codeception/commit/37a75622952b01ec368cf7d6dfc90a67ed225165) Fix persistent service for Symfony 3
- [`82af423`](https://github.com/Codeception/Codeception/commit/82af423f65c0ee3a8963273fbdf962792b7f5b09) [ZendExpressive] Set Cookie header in request
- [`626a998`](https://github.com/Codeception/Codeception/commit/626a998642794720a2c88cbf6345ffcc9efd4d03) Merge pull request [#5364](https://github-redirect.dependabot.com/Codeception/Codeception/issues/5364) from kardagan/ftp-update
- [`c2e0204`](https://github.com/Codeception/Codeception/commit/c2e020446e93ce96f50eb3eeb28f176f232af2b8) Merge pull request [#5366](https://github-redirect.dependabot.com/Codeception/Codeception/issues/5366) from KartaviK/feature/update-vlucas-phpdotenv-package
- [`debadc6`](https://github.com/Codeception/Codeception/commit/debadc6e66011d1a2da386945c75f64403b5728b) [Docs] Fixed XPath example of click method
- [`24f984f`](https://github.com/Codeception/Codeception/commit/24f984fc193c8d6df36ae08f81186eee3045895a) [Db][Docs] grabFromDatabase() returns mixed results
- Additional commits viewable in [compare view](https://github.com/Codeception/Codeception/compare/2.2.9...2.5.3)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Note: This repo was added to Dependabot recently, so you'll receive a maximum of 5 PRs for your first few update runs. Once an update run creates fewer than 5 PRs we'll remove that limit.
You can always request more updates by clicking Bump now in your Dependabot dashboard.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language
- `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme
Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):
- Update frequency (including time of day and day of week)
- Automerge options (never/patch/minor, and dev/runtime dependencies)
- Pull request limits (per update run and/or open at any time)
- Out-of-range updates (receive only lockfile updates, if desired)
- Security updates (receive only security updates, if desired)
Finally, you can contact us by mentioning @dependabot.
Bumps codeception/codeception from 2.2.9 to 2.5.3. This update includes security fixes.
Vulnerabilities fixed
*Sourced from [The Sonatype OSS Index](https://ossindex.sonatype.org/vuln/e48cbf22-0f53-4e83-a545-da6e1a4bfbb2).* > **CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')** > The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. > > Affected versions: >= 2.2.6, < 2.3.5 *Sourced from [The Sonatype OSS Index](https://ossindex.sonatype.org/vuln/e48cbf22-0f53-4e83-a545-da6e1a4bfbb2).* > **CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')** > The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. > > Affected versions: < 2.3.5, >= 2.2.6Changelog
*Sourced from [codeception/codeception's changelog](https://github.com/Codeception/Codeception/blob/2.5/CHANGELOG-2.5.md).* > #### 2.5.3 > > * [Db] cleanup database if populator is used > * [FTP] Compatibility with phpseclib v2 by [**kardagan**](https://github.com/kardagan) > * [JsonType] Fixed issue [#5230](https://github-redirect.dependabot.com/Codeception/Codeception/issues/5230) Dropped filters after a string:regex by [**ellisgl**](https://github.com/ellisgl) > * [Symfony] Fixed persistent service functionality for Symfony 3 by [**Naktibalda**](https://github.com/Naktibalda) > * [ZendExpressive] Set Cookie header in request by [**Naktibalda**](https://github.com/Naktibalda) > * Updated vlucas/phpdotenv package to ^3.0 version by [**KartaviK**](https://github.com/KartaviK) > * Documentation improvements by [**chrisaligent**](https://github.com/chrisaligent) [**richleland**](https://github.com/richleland) [**SanzhiyevMergen**](https://github.com/SanzhiyevMergen) [**sdlins**](https://github.com/sdlins) > > > #### 2.5.2 > > * [ZendExppressive] Support for Zend Expressive v3 by [**Naktibalda**](https://github.com/Naktibalda) > * [ZendExppressive] Added options to reload application between tests and between requests by [**Naktibalda**](https://github.com/Naktibalda) > * [Symfony] Fix "already initialized service", "reboot kernel issue" [#5262](https://github-redirect.dependabot.com/Codeception/Codeception/issues/5262) by [**gdmfx**](https://github.com/gdmfx) > * {Yii2] Prevent NPE [#5259](https://github-redirect.dependabot.com/Codeception/Codeception/issues/5259) by [**SilverFire**](https://github.com/SilverFire) > * [Db] isPopulated method was hidden by renaming to _isPopulated by [**Naktibalda**](https://github.com/Naktibalda) > * [Db] don't clear database for empty dump by [**Slamdunk**](https://github.com/Slamdunk) > * [AMQP] added methods `seeQueueIsEmpty`, `dontSeeQueueIsEmpty`, `seeNumberOfMessagesInQueue`, `scheduleQueueCleanup` method by [**kardagan**](https://github.com/kardagan) > * [REST][PhpBrowser][Frameworks] Save page source as .fail.json or .fail.xml depending on content type, by [**freiondrej**](https://github.com/freiondrej) > * [Doctrine2] Cleanup property works after on reconfigure [#5250](https://github-redirect.dependabot.com/Codeception/Codeception/issues/5250) by [**joelmedeiros**](https://github.com/joelmedeiros) > * [JsonType] Allow to use : in regex filter ([#5273](https://github-redirect.dependabot.com/Codeception/Codeception/issues/5273)) by [**ellisgl**](https://github.com/ellisgl) > * [WebDriver] Print curl error to debug output if WebDriver failed to connect [#5315](https://github-redirect.dependabot.com/Codeception/Codeception/issues/5315) by [**Naktibalda**](https://github.com/Naktibalda) > * [Logger] Ignores empty context and extra fields, by [**siad007**](https://github.com/siad007) > * [Recorder] Improved steps ignoring in Recorder extension with meta steps and annotations support [#5210](https://github-redirect.dependabot.com/Codeception/Codeception/issues/5210) by [**sspat**](https://github.com/sspat). > * `[**dataProvider**](https://github.com/dataProvider)` works with yield/generators [#5271](https://github-redirect.dependabot.com/Codeception/Codeception/issues/5271) by [**burned42**](https://github.com/burned42) > * Fixed issue ArrayContainsComparator do not Intersect correctly Empty expected nested array [#5303](https://github-redirect.dependabot.com/Codeception/Codeception/issues/5303) by [**malinink**](https://github.com/malinink) > * Fixed issue of steps with mocked objects [#5163](https://github-redirect.dependabot.com/Codeception/Codeception/issues/5163) by [**dh9325**](https://github.com/dh9325) > * Added Environment Name To Descriptor Unique Signatures [#5294](https://github-redirect.dependabot.com/Codeception/Codeception/issues/5294) by [**Tenzian**](https://github.com/Tenzian) > * Run command: Added `--phpunit-xml` option, which produces xml report having the same structure as PhpUnit's [#5004](https://github-redirect.dependabot.com/Codeception/Codeception/issues/5004) by [**Naktibalda**](https://github.com/Naktibalda) > * Bootstrap command: Changed namespace shortcut to `-s` [#5275](https://github-redirect.dependabot.com/Codeception/Codeception/issues/5275) by [**Naktibalda**](https://github.com/Naktibalda) > * Improved the docs; by [**h311ion**](https://github.com/h311ion), [**gimler**](https://github.com/gimler), [**picass0**](https://github.com/picass0), [**josephzidell**](https://github.com/josephzidell) > > > #### 2.5.1 > > * Recorder extension improvements by [**OneEyedSpaceFish**](https://github.com/OneEyedSpaceFish). See [#5177](https://github-redirect.dependabot.com/Codeception/Codeception/issues/5177): > * HTML layout improvements > * Restructured tests to show nested output > * file operation exceptions / log them without throwing exceptions > * fix edge cases with file operations (too long wantTo, etc.) > * the ability to automatically purge old reports (from previous runs) > * display errors in the recorded page rather than saving it as error.png > * the ability not to display any Unicode characters if ANSI only output is requested > * the ability not to display any colors in output if no-colors is requested > * the ability to change colors in the generated list based on configuration > * [Db] Made `_loadDump` unconditional like it was in 2.4. Fixed [#5195](https://github-redirect.dependabot.com/Codeception/Codeception/issues/5195) by [**Naktibalda**](https://github.com/Naktibalda) > * [Db] Allows to specify more than one dump file. See [#5220](https://github-redirect.dependabot.com/Codeception/Codeception/issues/5220) by [**Fenikkusu**](https://github.com/Fenikkusu) > * [WebDriver] Added `waitForElementClickable` by [**FatBoyXPC**](https://github.com/FatBoyXPC) > ... (truncated)Commits
- [`19f0fe8`](https://github.com/Codeception/Codeception/commit/19f0fe845c0af5af2a6c094dc0df3a178a3fd5b0) Bumped version to 2.5.3 - [`9a40338`](https://github.com/Codeception/Codeception/commit/9a40338805cd00e8f7df9b7307cb9cae05c4e708) Updated changelog for 2.5.3 release - [`d229911`](https://github.com/Codeception/Codeception/commit/d2299114c1bba6cd3d7b84d0469c4c154e53418c) [Db] cleanup database if populator is used ([#5358](https://github-redirect.dependabot.com/Codeception/Codeception/issues/5358)) - [`6ae3c16`](https://github.com/Codeception/Codeception/commit/6ae3c161175aa96c9e1675bf3c3d9cbead41acd7) Merge pull request [#5372](https://github-redirect.dependabot.com/Codeception/Codeception/issues/5372) from Codeception/symfony3-services - [`37a7562`](https://github.com/Codeception/Codeception/commit/37a75622952b01ec368cf7d6dfc90a67ed225165) Fix persistent service for Symfony 3 - [`82af423`](https://github.com/Codeception/Codeception/commit/82af423f65c0ee3a8963273fbdf962792b7f5b09) [ZendExpressive] Set Cookie header in request - [`626a998`](https://github.com/Codeception/Codeception/commit/626a998642794720a2c88cbf6345ffcc9efd4d03) Merge pull request [#5364](https://github-redirect.dependabot.com/Codeception/Codeception/issues/5364) from kardagan/ftp-update - [`c2e0204`](https://github.com/Codeception/Codeception/commit/c2e020446e93ce96f50eb3eeb28f176f232af2b8) Merge pull request [#5366](https://github-redirect.dependabot.com/Codeception/Codeception/issues/5366) from KartaviK/feature/update-vlucas-phpdotenv-package - [`debadc6`](https://github.com/Codeception/Codeception/commit/debadc6e66011d1a2da386945c75f64403b5728b) [Docs] Fixed XPath example of click method - [`24f984f`](https://github.com/Codeception/Codeception/commit/24f984fc193c8d6df36ae08f81186eee3045895a) [Db][Docs] grabFromDatabase() returns mixed results - Additional commits viewable in [compare view](https://github.com/Codeception/Codeception/compare/2.2.9...2.5.3)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Note: This repo was added to Dependabot recently, so you'll receive a maximum of 5 PRs for your first few update runs. Once an update run creates fewer than 5 PRs we'll remove that limit.
You can always request more updates by clicking
Bump now
in your Dependabot dashboard.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language - `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com): - Update frequency (including time of day and day of week) - Automerge options (never/patch/minor, and dev/runtime dependencies) - Pull request limits (per update run and/or open at any time) - Out-of-range updates (receive only lockfile updates, if desired) - Security updates (receive only security updates, if desired) Finally, you can contact us by mentioning @dependabot.