Smarty 3.1.21 Released Oct 18, 2014
Smarty 3.1.21 minor bug fixes and improvements. Also following up a security bug fix where <script language="php"> tags still worked in secure mode. To note, this only affects users using Smarty in secure mode and exposing templates to untrusted third parties.
http://www.smarty.net/forums/viewtopic.php?t=25292
Zitat17.10.2014
- bugfix on $php_handling security and optimization of smarty_internal_parsetree (Thue Kristensen)