Update dependencies

[cyrillkalita]

Add Laravel 8 dependencies, as per #59

[abdrzakoxa]

@sildraug, @zarianec
someone can merge this?

[u01jmg3]

@adrianhurt @bri06 @dgoguerra

[elijahchancey]

@sildraug @zarianec @adrianhurt @dgoguerra Please merge this!

[cyrillkalita]

While @sildraug is reviewing the code (and assuming the patch is accepted), you can use the power of composer:

1. In the root of composer.json add repositories key (if you don't have one already)

    "repositories": [
        {
            "type": "vcs",
            "url": "https://github.com/cyrillkalita/Sanitizer"
        }
    ],

2. Update the version of the package to

    "require": {
        ...
        "waavi/sanitizer": "dev-laravel-8-patch",
        ...
}

This will instruct composer to replace the canonical waavi/sanitizer with a patched version.

Not ideal, I understand, but everyone's got a life and we have to respect authors, maintainers, and their time.

[abdrzakoxa]

You can also use this:

...
"laravel/framework": "8.6 as 7.28",
"waavi/sanitizer": "~1.0",
...

[cyrillkalita]

@abderrazzak-oxa not sure which of "not-ideal" solutions is less not ideal; locking the framework dependency or pointing to the patch.

For anyone looking for a quick solution, please remember, this should not be your production solution.

On one hand, the framework has been known to release security patches and locking to a version will prevent you from getting those. Upside - it keeps you composer.json very clean. Easy to forget something was done to it.

On another hand, replacing package with a patched version opens you to all sorts of malice from an unknown source, who can continue to add code. An obvious reason to not use it in production.

It would really be helpful through is @sildraug will decide if he wants to merge this code, though.

[nickfls]

@sildraug do you think you can review this PR?

[cyrillkalita]

For anyone still interested, I forked the repo into a stable version 8 here:
Sanitizer

Moving forward supports only Laravel 8 over PHP7.3

[f-liva]

Thank you @cyrillkalita