Merge branch 'release/4.0.5' into v4

Author: khalwat

CHANGELOG.md

@@ -2,6 +2,10 @@
 
 All notable changes to this project will be documented in this file.
 
+## 4.0.5 - 2028.08.18
+### Added
+* Provide a mechanism for adding Twig Extensions in bulk to the `SandboxView` ([#1632](https://github.com/nystudio107/craft-seomatic/issues/1632))
+
 ## 4.0.4 - 2025.06.10
 ### Fixed
 * Remove errant dependency on SEOmatic in the `SecurityPolicy` helper class

README.md

@@ -260,6 +260,28 @@ This will cause it to create the sandbox from the `seomatic-sandbox.php` file in
 
 Craft automatically creates a namespaced alias for each plugin.
 
+### Adding TwigExtensions
+
+By default, the Twig `SandboxView` will only have the Twig extensions in it that Craft itself registers. Any Twig extensions that are added by plugins or modules will not be present.
+
+This is because there is no "Register Twig Extensions" event sent by Craft that plugins are modules can listen for, so the `SandboxView` has no way to tell each plugin or module to register their Twig extensions in the Twig `SandboxView`.
+
+Instead, if you have Twig extensions that you want added to your Twig `SandboxView`, you can either do it manually:
+
+```php
+$sandboxView = new SandboxView();
+$sandboxView->registerTwigExtension(new MyTwigExtension());
+```
+
+...or you can pass in an array of class names to the constructor, and have the Twig `SandboxView` instantiate the Twig extensions for you:
+
+```php
+$sandboxView = new SandboxView(['twigExtensionClasses' => [
+    MyTwigExtension::class,
+    AnotherTwigExtension::class,
+]]);
+```
+
 ### Custom SecurityPolicy
 
 You can also create your own custom `SecurityPolicy` to use, it just needs to conform to the Twig [`SecurityPolicyInterface`](https://github.com/twigphp/Twig/blob/3.x/src/Sandbox/SecurityPolicyInterface.php):

composer.json

@@ -1,7 +1,7 @@
 {
   "name": "nystudio107/craft-twig-sandbox",
   "description": "Allows you to easily create a sandboxed Twig environment where you can control what tags, filters, functions, and object methods/properties are allowed",
-  "version": "4.0.4",
+  "version": "4.0.5",
   "keywords": [
     "craft",
     "cms",

src/web/SandboxView.php

@@ -25,6 +25,11 @@ class SandboxView extends View
      */
     public WebSandboxErrorHandler|ConsoleSandboxErrorHandler|null $sandboxErrorHandler = null;
 
+    /**
+     * @var class-string[] Array of TwigExtension classes to instantiate and add to the SandboxView
+     */
+    public array $twigExtensionClasses = [];
+
     // Public Methods
     // =========================================================================
 
@@ -39,5 +44,11 @@ public function init(): void
         $this->securityPolicy = $this->securityPolicy ?? new BlacklistSecurityPolicy();
         // Add the SandboxExtension with our SecurityPolicy lazily via ::registerTwigExtension()
         $this->registerTwigExtension(new SandboxExtension($this->securityPolicy, true));
+        // Register the additional TwigExtension classes
+        foreach ($this->twigExtensionClasses as $className) {
+            if (class_exists($className)) {
+                $this->registerTwigExtension(new $className());
+            }
+        }
     }
 }