summaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
* limited the maximum length of a submitted usernamev2.3.42v2.3.41origin/2.3Fabien Potencier2016-05-093-0/+84
* minor #18727 [2.3][Component/Security] Fixed phpdoc in AnonymousToken constru...Fabien Potencier2016-05-092-2/+2
|\
| * [2.3][Component/Security] Fixed phpdoc in AnonymousToken constructor for user...Erik van Wingerden2016-05-092-2/+2
* | add @Event annotation for AuthenticationEventsDaniel Espendiller2016-05-031-0/+4
* | remove unused variablev2.3.40Christian Flothmann2016-04-051-1/+0
* | [Security] Fixed SwitchUserListener when exiting an impersonication with Anon...Grégoire Pineau2016-04-042-1/+50
|/
* fix mocksChristian Flothmann2016-03-252-12/+16
* minor #18119 [Hack Day] Issue for newcomers (2). Replace perfom by perform (J...v2.3.39Fabien Potencier2016-03-121-1/+1
|\
| * replace perfom by performjuanluisgarciaborrego2016-03-121-1/+1
* | Updated all the README filesJavier Eguiluz2016-03-041-16/+11
* | Validate XLIFF translation filesv2.3.38Javier Eguiluz2016-02-231-0/+31
* | PhpUnitNoDedicateAssertFixer resultsSpacePossum2016-02-211-1/+1
* | Improve Norwegian translationsValentin Jonovs2016-02-201-2/+2
* | [appveyor] Fix failure reportingNicolas Grekas2016-02-011-0/+9
* | minor #17480 Static code analysis (Koc)Fabien Potencier2016-01-273-4/+3
|\ \
| * | Static code analysisKonstantin.Myakshin2016-01-253-4/+3
* | | Fixed the phpDoc of UserInterfaceJavier Eguiluz2016-01-251-1/+1
* | | Fixer findings.Possum2016-01-221-0/+4
|/ /
* | Fixed the documentation of VoterInterface::supportsAttributeJavier Eguiluz2016-01-181-1/+1
* | removed obsolete tests, fixed composer.jsonv2.3.37Fabien Potencier2016-01-142-205/+3
* | do not ship with a custom rng implementationChristian Flothmann2016-01-142-91/+3
* | [2.3] Static Code Analysis for ComponentsVladimir Reznichenko2016-01-121-4/+2
* | Update copyright yearDiego Saint Esteben2016-01-011-1/+1
* | minor #17086 CS: use nowdoc instead of heredoc (gharlan)Nicolas Grekas2015-12-282-3/+3
|\ \
| * | use nowdoc instead of heredocGregor Harlan2015-12-212-3/+3
* | | use requires annotationv2.3.36Christian Flothmann2015-12-221-13/+9
* | | skip bcrypt tests on incompatible platformsChristian Flothmann2015-12-191-0/+13
|/ /
* | [Security] Enable bcrypt validation and result length tests on all PHP versionsJakub Zalas2015-12-171-6/+0
* | [Security] Verify if a password encoded with bcrypt is no longer than 72 char...Jakub Zalas2015-12-173-3/+7
* | [Security] backported phpdoc from Guard component.Hugo Hamon2015-12-101-1/+11
* | CS: general fixesDariusz Ruminski2015-12-012-4/+4
* | security #16631 n/a (xabbuh)v2.3.35Fabien Potencier2015-11-232-0/+71
|\ \
| * | migrate session after remember me authenticationChristian Flothmann2015-11-232-0/+71
* | | prevent timing attacks in digest auth listenerChristian Flothmann2015-11-231-1/+2
* | | fix potential timing attack issueChristian Flothmann2015-11-232-27/+4
|/ /
* | Add missing exclusions from phpunit.xml.distNicolas Grekas2015-11-181-1/+4
* | minor #16414 removed all @covers annotations (fabpot)Fabien Potencier2015-11-022-49/+0
|\ \
| * | removed all @covers annotationsFabien Potencier2015-11-012-49/+0
* | | minor #16397 added the new Composer exclude-from-classmap option (annesosensio)Fabien Potencier2015-10-301-1/+4
|\ \ \ | |_|/ |/| |
| * | added the new Composer exclude-from-classmap optionAnne-Sophie Bachelard2015-10-301-1/+4
| |/
* | bug #16144 [Security] don't allow to install the split Security packages (xab...Fabien Potencier2015-10-271-0/+5
|\ \ | |/ |/|
| * don't allow to install the split Security packagesChristian Flothmann2015-10-271-0/+5
* | [Routing] use constants in testsv2.3.34Tobias Schultze2015-10-181-1/+2
* | [ci] Fix tests requirementsNicolas Grekas2015-10-123-19/+12
* | [ci] SymfonyTestsListener is now auto-registeredNicolas Grekas2015-10-111-4/+0
* | [ci] Enable collecting and replaying skipped testsNicolas Grekas2015-10-102-1/+4
* | minor #16145 [FrameworkBundle] Fix deps=low/high tests (nicolas-grekas)Fabien Potencier2015-10-061-0/+5
|\ \
| * | [FrameworkBundle] Fix deps=low/high testsNicolas Grekas2015-10-061-0/+5
* | | [2.3][SECURITY] Add remember me cookie configurationKlaas Cuvelier2015-10-064-26/+5
|/ /
* | [FrameworkBundle] [Security] Remove trans from the security/core in 2.3 & dir...maxime.steinhausser2015-10-062-142/+0
|/
* [Security\Core] Fix test failure after sebastianbergmann/phpunit#1821Nicolas Grekas2015-10-061-1/+1
* bug #14842 [Security][bugfix] "Remember me" cookie cleared on logout with cus...Fabien Potencier2015-10-054-6/+50
|\
| * [Security][bugfix] "Remember me" cookie cleared on logout with custom "secure...Dawid Nowak2015-10-054-6/+50
* | bug #13627 [Security] InMemoryUserProvider now concerns whether user's passwo...Fabien Potencier2015-10-052-17/+53
|\ \
| * | [Security] InMemoryUserProvider now concerns whether user's password is chang...Issei.M2015-08-102-17/+53
* | | Fixed incorrect and inconsistent translationslashae2015-09-281-6/+6
* | | Use random_bytes function if it is available for random number generationPierre du Plessis2015-09-232-5/+10
* | | [Security] Add missing docblock in PreAuthenticatedTokenv2.3.33v2.3.32Titouan Galopin2015-08-072-1/+8
|/ /
* | [Security] Do not save the target path in the session for a stateless firewallGrégoire Pineau2015-07-261-2/+6
* | [Security] removed useless else condition in SwitchUserListener class.Hugo Hamon2015-07-221-2/+2
* | [Security] fix check for empty usernamesChristian Flothmann2015-07-224-4/+4
* | trigger event with right user (add test)v2.3.31Christian Flothmann2015-06-281-0/+52
* | [Security] Initialize SwitchUserEvent::targetUser on attemptExitUserRichard van Laak2015-06-281-1/+2
* | Fix quoting style consistency.ogizanagi2015-06-281-1/+1
* | Standardize the name of the exception variablesJavier Eguiluz2015-06-1522-72/+72
|/
* minor #14474 [2.3] Static Code Analysis for Components (kalessil)Fabien Potencier2015-06-011-1/+1
|\
| * Php Inspections (EA Extended): - resolved possible PHP Fatal in \Symfony\...Vladimir Reznichenko2015-05-291-1/+1
* | [Security][Acl] enforce string identifiersChristian Flothmann2015-05-312-3/+25
|/
* minor #14670 [Security] TokenBasedRememberMeServices test to show why encodin...v2.3.30v2.3.29Fabien Potencier2015-05-212-3/+18
|\
| * [Security] TokenBasedRememberMeServices test to show why encoding username is...Dawid Nowak2015-05-212-3/+18
* | bug #14678 [Security] AbstractRememberMeServices::encodeCookie() validates co...Fabien Potencier2015-05-213-4/+42
|\ \
| * | [Security] AbstractRememberMeServices::encodeCookie() validates cookie partsDawid Nowak2015-05-213-4/+42
| |/
* | Avoid redirection to XHR URIsAlessandro Siragusa2015-05-201-1/+1
|/
* minor #14601 [Security][Translation] fixes #14584 (MatTheCat)Fabien Potencier2015-05-161-6/+6
|\
| * [Security][Translation] fixes #14584MatTheCat2015-05-101-6/+6
* | minor #14121 CS: Pre incrementation/decrementation should be used if possible...Fabien Potencier2015-05-1514-37/+37
|\ \
| * | CS: Pre incrementation/decrementation should be used if possibleGregor Harlan2015-04-0714-37/+37
* | | Fix tests in HHVMDiego Saint Esteben2015-05-111-1/+1
| |/ |/|
* | PhpDoc fix in AbstractRememberMeServicesv2.3.28Dawid Nowak2015-05-071-1/+1
* | link to https://symfony.com where possibleChristian Flothmann2015-05-012-3/+3
* | Fix Portuguese (Portugal) translation for SecurityRestless-ET2015-04-221-3/+3
* | CS fixesDariusz Ruminski2015-04-161-1/+1
|/
* CS: Use "self" keyword instead of class name if possibleGregor Harlan2015-04-012-2/+2
* minor #14090 CS: Unary operators should be placed adjacent to their operands ...v2.3.27Fabien Potencier2015-03-303-9/+9
|\
| * CS: Unary operators should be placed adjacent to their operandsDariusz Ruminski2015-03-273-9/+9
* | minor #14089 CS: Binary operators should be arounded by at least one space (k...Fabien Potencier2015-03-308-27/+27
|\ \
| * | CS: Binary operators should be arounded by at least one spaceDariusz Ruminski2015-03-278-27/+27
| |/
* | remove useless tests that fail in php 7Tobias Schultze2015-03-271-17/+0
|/
* fixed CSFabien Potencier2015-03-251-6/+7
* Change behavior to mirror hash_equals() returning early if there is a length ...Anthony Ferrara2015-03-251-9/+9
* CS fixingAnthony Ferrara2015-03-251-1/+1
* Prevent modifying secrets as much as possibleAnthony Ferrara2015-03-251-9/+13
* Update StringUtils.phpScott Arciszewski2015-03-251-1/+8
* WhitespaceScott Arciszewski2015-03-251-2/+3
* Update StringUtils.phpScott Arciszewski2015-03-251-2/+16
* minor #14038 CS: fix some license headers (keradus)Fabien Potencier2015-03-241-6/+6
|\
| * CS: fix some license headersDariusz Ruminski2015-03-241-0/+10
* | CS: Ensure there is no code on the same line as the PHP open tag and it is fo...Dariusz Ruminski2015-03-242-0/+2
|/
* CS: Convert double quotes to single quotesDariusz Ruminski2015-03-215-9/+9
* [2.3] Static Code Analysis for Componentsv2.3.26Vladimir Reznichenko2015-03-121-3/+0