Allow symfony/html-sanitizer ^8.0

[ejunker]

Description

Update composer.json version constraint for symfony/html-sanitizer to also allow ^8.0.

Note: this is my first PR to Filament. I am not sure if this should target 4.x or 5.x branch.

Visual changes

None

Functional changes

• Code style has been fixed by running the composer cs command.
• Changes have been tested to not break existing functionality.
• Documentation is up-to-date.

[FlorianWeigang]

@danharrin

Hey guys,

just FYI after composer update I started getting 500 Errors on my Servers with sth like:

Class \"Dom\\HTMLDocument\" not found at /app/vendor/symfony/html-sanitizer/Parser/NativeParser.php:21

Using Filament v4 + PHP 8.3 and my html-sanitizer got updated to v8.0 causes the error.

Fix:
Actually pinning it back to "symfony/html-sanitizer": "^7.0" in my composer.json fixed it.

In case anybody else got the issue.

Best Flo

[danharrin]

Please open an issue with a reproduction repository so we can look into it

[ejunker]

I apologize. I didn't realize symfony/html-sanitizer 8.0 requires PHP 8.4 since the class \Dom\HTMLDocument is part of the new, modern DOM extension introduced in PHP 8.4

[danharrin]

Composer should not even allow that dependency version on that PHP version then, why is that happening?

[ejunker]

Maybe he installed with composer install --ignore-platform-reqs to ignore the PHP version constraint

[FlorianWeigang]

Just checked everything again:

Local: PHP 8.4
Deployment Script: composer install --no-interaction --optimize-autoloader --ignore-platform-reqs
Server: PHP 8.3

So yep, --ignore-platform-reqs explains why Composer allowed it despite the PHP constraint.

Really appreciate your quick responses, thanks everyone! Have a great weekend and don’t work too late!