summaryrefslogtreecommitdiffstats
path: root/Core
Commit message (Collapse)AuthorAgeFilesLines
* minor #21088 Rename DebugAccessDecisionManager to ↵Nicolas Grekas2017-01-033-84/+118
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | TraceableAccessDecisionManager (Jean85) This PR was squashed before being merged into the 3.3-dev branch (closes #21088). Discussion ---------- Rename DebugAccessDecisionManager to TraceableAccessDecisionManager | Q | A | ------------- | --- | Branch? | master | Bug fix? | no | New feature? | no | BC breaks? | no | Deprecations? | no | Tests pass? | yes | Fixed tickets | #21085 | License | MIT [EDIT] No longer WIP, test passing. Also, test added to preserve BC with the SecurityBundle. Commits ------- c5e0e59 Rename DebugAccessDecisionManager to TraceableAccessDecisionManager
| * Rename DebugAccessDecisionManager to TraceableAccessDecisionManagerAlessandro Lai2017-01-033-84/+118
| |
* | Merge branch '3.2'Fabien Potencier2017-01-021-1/+1
|\ \ | |/ |/| | | | | | | | | | | | | * 3.2: updated LICENSE year updated LICENSE year updated LICENSE year Fixed `@return self` with `$this` [Yaml] add missing indicator character
| * Merge branch '3.1' into 3.2v3.2.2origin/3.2Fabien Potencier2017-01-021-1/+1
| |\ | | | | | | | | | | | | | | | | | | * 3.1: updated LICENSE year updated LICENSE year Fixed `@return self` with `$this`
| | * Merge branch '2.8' into 3.1v3.1.9Fabien Potencier2017-01-021-1/+1
| | |\ | | | | | | | | | | | | | | | | | | | | | | | | * 2.8: updated LICENSE year updated LICENSE year Fixed `@return self` with `$this`
| | | * Merge branch '2.7' into 2.8Fabien Potencier2017-01-021-1/+1
| | | |\ | | | | | | | | | | | | | | | | | | | | | | | | | * 2.7: updated LICENSE year Fixed `@return self` with `$this`
| | | | * updated LICENSE yearv2.7.23origin/2.7Fabien Potencier2017-01-021-1/+1
| | | | |
* | | | | Merge branch '3.2'Fabien Potencier2016-12-1925-153/+153
|\ \ \ \ \ | |/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 3.2: fixed obsolete getMock() usage fixed obsolete getMock() usage fixed obsolete getMock() usage fixed obsolete getMock() usage [WebProfilerBundle] Display multiple HTTP headers in WDT do not remove the Twig ExceptionController service removed obsolete condition do not try to register incomplete definitions
| * | | | Merge branch '3.1' into 3.2Fabien Potencier2016-12-1925-153/+153
| |\ \ \ \ | | |/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 3.1: fixed obsolete getMock() usage fixed obsolete getMock() usage fixed obsolete getMock() usage [WebProfilerBundle] Display multiple HTTP headers in WDT do not remove the Twig ExceptionController service removed obsolete condition do not try to register incomplete definitions
| | * | | fixed obsolete getMock() usageFabien Potencier2016-12-195-37/+37
| | | | |
| | * | | Merge branch '2.8' into 3.1Fabien Potencier2016-12-1920-116/+116
| | |\ \ \ | | | |/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.8: fixed obsolete getMock() usage fixed obsolete getMock() usage [WebProfilerBundle] Display multiple HTTP headers in WDT do not remove the Twig ExceptionController service removed obsolete condition do not try to register incomplete definitions
| | | * | fixed obsolete getMock() usageFabien Potencier2016-12-195-24/+24
| | | | |
| | | * | Merge branch '2.7' into 2.8Fabien Potencier2016-12-1921-127/+127
| | | |\ \ | | | | |/ | | | | | | | | | | | | | | | | | | | | * 2.7: fixed obsolete getMock() usage [WebProfilerBundle] Display multiple HTTP headers in WDT
| | | | * fixed obsolete getMock() usageFabien Potencier2016-12-1923-137/+137
| | | | |
| | | * | [Security] Fix testNicolas Grekas2016-12-171-1/+1
| | | | |
| | | * | Merge branch '2.7' into 2.8Fabien Potencier2016-12-142-1/+72
| | | |\ \ | | | | |/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.7: [Validator] add Indonesian translation fixed CS [config] Fix issue when key removed and left value only [Security] AbstractVoter method supportsAttribute gives false positive if attribute is zero (0)
| | | | * bug #20734 [Security] AbstractVoter->supportsAttribute gives false positive ↵Fabien Potencier2016-12-142-1/+72
| | | | |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | if attribute is zero (0) (martynas-foodpanda) This PR was merged into the 2.7 branch. Discussion ---------- [Security] AbstractVoter->supportsAttribute gives false positive if attribute is zero (0) | Q | A | ------------- | --- | Branch? | 2.7 | Bug fix? | yes | New feature? | no | BC breaks? | no | Deprecations? | no | Tests pass? | yes | Fixed tickets | | License | MIT | Doc PR | Issue is easy to reproduce with test giving negative data set. 0 should not pass as supported attribute for any set of attributes but it does as in_array in the method does not use flag 'strict' set to true. As this is abstract voter and is used by users with their code flag 'strict' should be set to true. Since is there in 2.7 and 2.8 (LTS) IMHO it should be fixed. Commits ------- 8306530 [Security] AbstractVoter method supportsAttribute gives false positive if attribute is zero (0)
| | | | | * [Security] AbstractVoter method supportsAttribute gives false positive if ↵Martynas Narbutas2016-12-032-1/+72
| | | | | | | | | | | | | | | | | | | | | | | | attribute is zero (0)
* | | | | | Merge branch '3.2'Nicolas Grekas2016-12-083-9/+9
|\ \ \ \ \ \ | |/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 3.2: (51 commits) [FrameworkBundle] [Workflow] Fix service marking store configuration Fix merge [Validator] add class name to the cache key [Serializer] Remove AbstractObjectNormalizer::isAttributeToNormalize Throw less misleading exception when property access not found [Twig] Fix deprecations with Twig 1.29 [FrameworkBundle] Fix validation cache warmer with failing or missing classes Fixed typo [FrameworkBundle] Removed the kernel.debug parameter from the cache pool namespace seed Fix email address fix the docblock in regard to the role argument [Bridge\Twig] Trigger deprecation when using FormExtension::$renderer Don't use the "app" global variable in the profiler [VarDumper] fix tests when xdebug is enabled Fix merge FIXED NON EXISTING TYPE DECLARATION [Form] Add failing test for data collector bug [Cache] Fix dumping SplDoublyLinkedList iter mode [Form] Fix FormDataCollector Ignore missing 'debug.file_link_formatter' service in Debug and Twig bundles ...
| * | | | | Merge branch '3.1' into 3.2v3.2.1Nicolas Grekas2016-12-083-3/+3
| |\ \ \ \ \ | | |/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 3.1: (28 commits) Fix merge [Validator] add class name to the cache key [Serializer] Remove AbstractObjectNormalizer::isAttributeToNormalize Throw less misleading exception when property access not found [Twig] Fix deprecations with Twig 1.29 Fixed typo [FrameworkBundle] Removed the kernel.debug parameter from the cache pool namespace seed Fix email address fix the docblock in regard to the role argument Don't use the "app" global variable in the profiler [VarDumper] fix tests when xdebug is enabled Fix merge FIXED NON EXISTING TYPE DECLARATION [Cache] Fix dumping SplDoublyLinkedList iter mode [Console] fixed PHP7 Errors when not using Dispatcher Regression test for missing controller arguments (3.1) Regression test for missing controller arguments fix a test checking for a value [Form][DX] FileType "multiple" fixes fixed CS ...
| | * | | | Merge branch '2.8' into 3.1v3.1.8Nicolas Grekas2016-12-083-3/+3
| | |\ \ \ \ | | | |/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.8: [Twig] Fix deprecations with Twig 1.29 Fixed typo Fix email address fix the docblock in regard to the role argument [VarDumper] fix tests when xdebug is enabled Fix merge [Cache] Fix dumping SplDoublyLinkedList iter mode [Console] fixed PHP7 Errors when not using Dispatcher Regression test for missing controller arguments fix a test checking for a value [Form][DX] FileType "multiple" fixes fixed CS [TwigBundle] Fix twig loader registered twice [WebProfilerBundle] Fix dump block is unfairly restrained [Console] Fix wrong handling of multiline arg/opt descriptions [DependencyInjection] PhpDumper.php: hasReference() should not search references in lazy service arguments. [Form] fixed "empty_value" option deprecation Cast result to int before adding to it
| | | * | | Merge branch '2.7' into 2.8v2.8.15Nicolas Grekas2016-12-083-3/+3
| | | |\ \ \ | | | | |/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.7: [Twig] Fix deprecations with Twig 1.29 fix the docblock in regard to the role argument Cast result to int before adding to it
| | | | * | fix the docblock in regard to the role argumentv2.7.22Christian Flothmann2016-12-063-3/+3
| | | | |/
* | | | | [Security] deprecate the RoleInterfaceChristian Flothmann2016-12-076-17/+18
| | | | |
* | | | | Merge branch '3.2'Nicolas Grekas2016-11-251-2/+2
|\ \ \ \ \ | |/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 3.2: [Routing] Fail properly when a route parameter name cannot be used as a PCRE subpattern name [FrameworkBundle] Improve performance of ControllerNameParser Update documentation link to the component [HttpFoundation] Add links to RFC-7231 [DI] Initialize properties before method calls [Bridge/Doctrine] Use cache.prefix.seed parameter for generating cache namespace Tag missing internals Add missing example for 'path' argument in debug:config [WebProfilerBundle] Dont use request attributes in RouterController Fix complete config tests
| * | | | Merge branch '3.1' into 3.2v3.2.0-RC2v3.2.0Nicolas Grekas2016-11-251-2/+2
| |\ \ \ \ | | |/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 3.1: [Routing] Fail properly when a route parameter name cannot be used as a PCRE subpattern name [FrameworkBundle] Improve performance of ControllerNameParser Update documentation link to the component [HttpFoundation] Add links to RFC-7231 [DI] Initialize properties before method calls Tag missing internals [WebProfilerBundle] Dont use request attributes in RouterController Fix complete config tests
| | * | | Merge branch '2.8' into 3.1Nicolas Grekas2016-11-251-2/+2
| | |\ \ \ | | | |/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.8: [Routing] Fail properly when a route parameter name cannot be used as a PCRE subpattern name [FrameworkBundle] Improve performance of ControllerNameParser Update documentation link to the component [HttpFoundation] Add links to RFC-7231 [DI] Initialize properties before method calls Tag missing internals [WebProfilerBundle] Dont use request attributes in RouterController Fix complete config tests
| | | * | Merge branch '2.7' into 2.8Nicolas Grekas2016-11-251-2/+2
| | | |\ \ | | | | |/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.7: [Routing] Fail properly when a route parameter name cannot be used as a PCRE subpattern name [FrameworkBundle] Improve performance of ControllerNameParser Update documentation link to the component [HttpFoundation] Add links to RFC-7231 [DI] Initialize properties before method calls Tag missing internals [WebProfilerBundle] Dont use request attributes in RouterController Fix complete config tests
| | | | * Tag missing internalsMaxime Steinhausser2016-11-251-2/+2
| | | | |
* | | | | updated version to 3.3Fabien Potencier2016-11-191-1/+1
|/ / / /
* | | | Merge branch '3.1'v3.2.0-RC1Fabien Potencier2016-11-161-1/+1
|\ \ \ \ | |/ / / | | | | | | | | | | | | | | | | | | | | | | | | * 3.1: [Debug] Remove GLOBALS from exception context to avoid endless recursion [Serializer] Improve test coverage of the MaxDepth annotation DX: replace @link with @see annotation bumped min version of Twig to 1.28
| * | | Merge branch '2.8' into 3.1v3.1.7Fabien Potencier2016-11-161-1/+1
| |\ \ \ | | |/ / | | | | | | | | | | | | | | | | * 2.8: DX: replace @link with @see annotation bumped min version of Twig to 1.28
| | * | Merge branch '2.7' into 2.8v2.8.14Fabien Potencier2016-11-151-1/+1
| | |\ \ | | | |/ | | | | | | | | | | | | * 2.7: DX: replace @link with @see annotation
| | | * DX: replace @link with @see annotationv2.7.21Dariusz Ruminski2016-11-131-1/+1
| | | |
* | | | Merge branch '3.1'v3.2.0-BETA1Nicolas Grekas2016-10-062-1/+12
|\ \ \ \ | |/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 3.1: Minor fixes & cleanups [DependencyInjection] Add missing PHPDoc type Correct a typo in the ReflectionExtractor's description [HttpFoundation] JSONP callback validation [Console] Improved the explanation of the hasOption() method Uniformize exception vars according to our CS add missing use statement bug #18042 [Security] $attributes can be anything, but RoleVoter assumes strings
| * | | Merge branch '2.8' into 3.1v3.1.6Fabien Potencier2016-10-052-1/+12
| |\ \ \ | | |/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.8: [DependencyInjection] Add missing PHPDoc type Correct a typo in the ReflectionExtractor's description [HttpFoundation] JSONP callback validation [Console] Improved the explanation of the hasOption() method Uniformize exception vars according to our CS add missing use statement bug #18042 [Security] $attributes can be anything, but RoleVoter assumes strings
| | * | Merge branch '2.7' into 2.8v2.8.13Fabien Potencier2016-10-052-1/+12
| | |\ \ | | | |/ | | | | | | | | | | | | | | | | | | | | | | | | * 2.7: [HttpFoundation] JSONP callback validation [Console] Improved the explanation of the hasOption() method add missing use statement bug #18042 [Security] $attributes can be anything, but RoleVoter assumes strings
| | | * bug #19725 [Security] $attributes can be anything, but RoleVoter assumes ↵v2.7.20Fabien Potencier2016-10-052-1/+12
| | | |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | strings (Jonatan Männchen) This PR was merged into the 2.7 branch. Discussion ---------- [Security] $attributes can be anything, but RoleVoter assumes strings | Q | A | ------------- | --- | Branch? | 2.7 | Bug fix? | yes | New feature? | no | BC breaks? | yes | Deprecations? | no | Tests pass? | yes | Fixed tickets | #18042 | License | MIT | Doc PR | reference to the documentation PR, if any Commits ------- ad3ac95 bug #18042 [Security] $attributes can be anything, but RoleVoter assumes strings
| | | | * bug #18042 [Security] $attributes can be anything, but RoleVoter assumes stringsJonatan Männchen2016-09-212-1/+12
| | | | |
* | | | | Merge branch '3.1'Fabien Potencier2016-09-241-0/+71
|\ \ \ \ \ | |/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 3.1: expectedException expects FQCN Fixed expectedException annotations [Cache] Fix password used to make the redis connection. Security and validators messages translation to Latvian [Form] FormView->isRendered() remove dead code and simplify the flow Fixed issue with legacy find() method not working as expected
| * | | | Merge branch '2.8' into 3.1v3.1.5Fabien Potencier2016-09-241-0/+71
| |\ \ \ \ | | |/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.8: expectedException expects FQCN Fixed expectedException annotations Security and validators messages translation to Latvian [Form] FormView->isRendered() remove dead code and simplify the flow
| | * | | Merge branch '2.7' into 2.8v2.8.12Fabien Potencier2016-09-241-0/+71
| | |\ \ \ | | | |/ / | | | | | | | | | | | | | | | | | | | | | | | | | * 2.7: Fixed expectedException annotations Security and validators messages translation to Latvian [Form] FormView->isRendered() remove dead code and simplify the flow
| | | * | Security and validators messages translation to Latvianv2.7.19Rikijs Murgs2016-09-221-0/+71
| | | |/
* | | | AccessDeniedException: rename object to subjectChristian Flothmann2016-09-191-6/+6
| | | | | | | | | | | | | | | | | | | | With this change the name is inline with what we use in the base voter interface.
* | | | [HttpKernel] Use VarDumper in the profilerWouterJ2016-09-172-44/+8
| | | |
* | | | feature #19843 [Security] Allow run-time configuration of hash algo ↵Fabien Potencier2016-09-131-0/+40
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | (nicolas-grekas) This PR was merged into the 3.2-dev branch. Discussion ---------- [Security] Allow run-time configuration of hash algo | Q | A | ------------- | --- | Branch? | master | New feature? | yes | Tests pass? | yes | Fixed tickets | - | License | MIT | Doc PR | - Required if we want run-time config with env vars. See #19681 Commits ------- 7903a46 [Security] Allow run-time configuration of hash algo
| * | | | [Security] Allow run-time configuration of hash algoNicolas Grekas2016-09-041-0/+40
| | | | |
* | | | | Merge branch '3.1'Nicolas Grekas2016-09-122-2/+11
|\ \ \ \ \ | |/ / / / |/| / / / | |/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 3.1: [travis/appveyor] Wire simple-phpunit [Console] fixed PHP7 Errors are now handled and converted to Exceptions Fix #19721 Fix translation:update command count bumped Symfony version to 2.8.12 updated VERSION for 2.8.11 updated CHANGELOG for 2.8.11 bumped Symfony version to 2.7.19 updated VERSION for 2.7.18 update CONTRIBUTORS for 2.7.18 updated CHANGELOG for 2.7.18 [Security] Optimize RoleHierarchy's buildRoleMap method [FrameworkBundle] Fix Incorrect line break in exception message (500 debug page) [Security] Added note inside phpdoc. Minor cleanups and improvements [form] lazy trans `post_max_size_message`. [DI] Fix setting synthetic services on ContainerBuilder [ClassLoader] Fix ClassCollectionLoader inlining with declare(strict_types=1)
| * | | Merge branch '2.8' into 3.1Fabien Potencier2016-09-121-2/+10
| |\ \ \ | | |/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.8: [travis/appveyor] Wire simple-phpunit [Console] fixed PHP7 Errors are now handled and converted to Exceptions Fix #19721 Fix translation:update command count bumped Symfony version to 2.8.12 updated VERSION for 2.8.11 updated CHANGELOG for 2.8.11 bumped Symfony version to 2.7.19 updated VERSION for 2.7.18 update CONTRIBUTORS for 2.7.18 updated CHANGELOG for 2.7.18 [Security] Optimize RoleHierarchy's buildRoleMap method
| | * | Merge branch '2.7' into 2.8Fabien Potencier2016-09-121-2/+10
| | |\ \ | | | |/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.7: [travis/appveyor] Wire simple-phpunit [Console] fixed PHP7 Errors are now handled and converted to Exceptions Fix #19721 bumped Symfony version to 2.7.19 updated VERSION for 2.7.18 update CONTRIBUTORS for 2.7.18 updated CHANGELOG for 2.7.18 [Security] Optimize RoleHierarchy's buildRoleMap method
| | | * minor #19868 [Security] Optimize RoleHierarchy's buildRoleMap method (Enleur)v2.7.18Fabien Potencier2016-09-061-2/+10
| | | |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This PR was squashed before being merged into the 2.7 branch (closes #19868). Discussion ---------- [Security] Optimize RoleHierarchy's buildRoleMap method | Q | A | ------------- | --- | Branch? | 2.7 | Bug fix? | no | New feature? | no | BC breaks? | no | Deprecations? | no | Tests pass? | yes | Fixed tickets | no | License | MIT | Doc PR | no I have an issue with a large role hierarchy(~150 roles). Optimized it a little bit ![image](https://cloud.githubusercontent.com/assets/858989/18271257/df6c4ba0-7439-11e6-8406-e13bdcefe9ca.png) Commits ------- c3b68b0 [Security] Optimize RoleHierarchy's buildRoleMap method
| | | | * [Security] Optimize RoleHierarchy's buildRoleMap methodEnleur2016-09-061-2/+10
| | | | |
| | | * | Minor fixesv2.7.16Vyacheslav Pavlov2016-07-301-2/+0
| | | | |
| * | | | Merge branch '2.8' into 3.1Fabien Potencier2016-09-061-0/+1
| |\ \ \ \ | | |/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.8: [FrameworkBundle] Fix Incorrect line break in exception message (500 debug page) [Security] Added note inside phpdoc. Minor cleanups and improvements [form] lazy trans `post_max_size_message`. [DI] Fix setting synthetic services on ContainerBuilder [ClassLoader] Fix ClassCollectionLoader inlining with declare(strict_types=1)
| | * | | [Security] Added note inside phpdoc.Konstantin Myakshin2016-09-061-0/+1
| | | | |
| | * | | Merge branch '2.7' into 2.8Nicolas Grekas2016-07-051-2/+0
| | |\ \ \ | | | |/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.7: removed @since Remove and change unrelevant comments in Validator and Security components. [Validator] UuidValidator must accept a Uuid constraint. [Validator] make UuidValidator class formatting consistent.
| | | * | removed @sinceFabien Potencier2016-07-041-2/+0
| | | | |
* | | | | [Security] Expose the required roles in AccessDeniedExceptionTristan Darricau2016-07-291-0/+35
| | | | |
* | | | | Merge branch '3.1'Nicolas Grekas2016-07-051-1/+1
|\ \ \ \ \ | |/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 3.1: [VarDumper] Fix indentation trimming in ExceptionCaster [HttpKernel] Clarify deprecation of non-scalar values in surrogate renderer removed @since [Security] fixed DebugAccessDecisionManager::setVoters() Remove and change unrelevant comments in Validator and Security components. [Validator] add missing interface use statement for phpdoc block return type. [Validator] UuidValidator must accept a Uuid constraint. [Validator] make UuidValidator class formatting consistent. Conflicts: src/Symfony/Component/Validator/Tests/Constraints/AbstractConstraintValidatorTest.php
| * | | | [Security] fixed DebugAccessDecisionManager::setVoters()Jules Pietri2016-07-031-1/+1
| | | | |
* | | | | Merge branch '3.1'Fabien Potencier2016-06-301-7/+13
|\ \ \ \ \ | |/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 3.1: Fixed BC Layer in DoctrineChoiceLoader [HttpKernel] Add listener that checks when request has both Forwarded and X-Forwarded-For [HttpKernel] Move conflicting origin IPs handling to catch block [travis] Fix deps=low/high patching Fixed some issues of the AccessDecisionManager profiler [DoctrineBridge] fixed default parameter value in UniqueEntityValidator
| * | | | bug #18934 Fixed some issues of the AccessDecisionManager profiler ↵v3.1.2Fabien Potencier2016-06-291-7/+13
| |\ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | (javiereguiluz) This PR was squashed before being merged into the 3.1 branch (closes #18934). Discussion ---------- Fixed some issues of the AccessDecisionManager profiler | Q | A | ------------- | --- | Branch? | 3.1 | Bug fix? | yes | New feature? | no | BC breaks? | no | Deprecations? | no | Tests pass? | yes | Fixed tickets | #19022 https://github.com/symfony/symfony-standard/issues/968 https://github.com/schmittjoh/JMSSecurityExtraBundle/issues/207 | License | MIT | Doc PR | - Commits ------- 082f1b5 Fixed some issues of the AccessDecisionManager profiler
| | * | | | Fixed some issues of the AccessDecisionManager profilerJavier Eguiluz2016-06-291-7/+13
| | | | | |
* | | | | | Merge branch '3.1'Fabien Potencier2016-06-296-6/+6
|\ \ \ \ \ \ | |/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 3.1: fixed CS fixed CS fixed CS fixed form tests [Console] Fix formatting of SymfonyStyle::comment() [Form] fix post max size translation type extension for >= 2.8 [Security] Allow LDAP loadUser override removed dots at the end of @param and @return fixed typo
| * | | | | Merge branch '3.0' into 3.1Fabien Potencier2016-06-295-5/+5
| |\ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 3.0: fixed CS fixed CS fixed form tests [Console] Fix formatting of SymfonyStyle::comment() [Form] fix post max size translation type extension for >= 2.8 removed dots at the end of @param and @return fixed typo
| | * \ \ \ \ Merge branch '2.8' into 3.0v3.0.8Fabien Potencier2016-06-295-5/+5
| | |\ \ \ \ \ | | | | |/ / / | | | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.8: fixed CS fixed form tests [Console] Fix formatting of SymfonyStyle::comment() [Form] fix post max size translation type extension for >= 2.8 removed dots at the end of @param and @return fixed typo
| | | * | | | Merge branch '2.7' into 2.8v2.8.8Fabien Potencier2016-06-295-5/+5
| | | |\ \ \ \ | | | | | |/ / | | | | |/| | | | | | | | | | | | | | | | | | | | | | | * 2.7: removed dots at the end of @param and @return fixed typo
| | | | * | | removed dots at the end of @param and @returnv2.7.15Fabien Potencier2016-06-285-5/+5
| | | | | | |
| * | | | | | [Security] Allow LDAP loadUser overrideTugdual Saunier2016-06-281-1/+1
| | |_|_|/ / | |/| | | |
* | | | | | Merge branch '3.1'Fabien Potencier2016-06-211-1/+1
|\ \ \ \ \ \ | |/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 3.1: fixed CS fixed CS fixed CS fixed CS tweaked default CS fixer config [HttpKernel] Dont close the output stream in debug move HttpKernel component to require section Fixed oci and sqlsrv merge queries when emulation is disabled - fixes #17284 [Session] fix PDO transaction aborted under PostgreSQL [Console] Use InputInterface inherited doc as possible Mention generating absolute urls in UPGRADE files and CHANGELOG parse embedded mappings only if value is a string add docblock type elements to support newly added IteratorAggregate::getIterator PhpStorm support FormBuilderInterface: fix getForm() return type. [YAML] Fixed parsing problem with nested DateTime lists Fixed typo in PHPDoc
| * | | | | fixed CSFabien Potencier2016-06-211-1/+1
| | | | | |
* | | | | | Merge branch '3.1'Nicolas Grekas2016-06-033-1/+52
|\ \ \ \ \ \ | |/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 3.1: [travis] Don't use parallel on HHVM [HttpKernel] Fix RequestDataCollector starting the session [appveyor] Ignore STATUS_HEAP_CORRUPTION errors on Windows [FrameworkBundle] Skip redis cache pools test on failed connection Fixed forwarded request data in templates [Security] Fix DebugAccessDecisionManager when object is not a scalar Skip some tests on HHVM due to a PHPunit bug Use the Trusty Travis infrastructure for HHVM builds LdapUserProvider: add missing argument type doc Fixed issue with missing argument in the abstract service definition for the ldap user provider Add 3.1 to PR template branch row, remove 2.3 Improve memory efficiency [Console] Fix BC break introduced by #18101 document method name changes in Voter class add missing hint for vote() argument type [#18838] add a test to avoid regressions bumped Symfony version to 3.1.1 updated VERSION for 3.1.0 updated CHANGELOG for 3.1.0 Conflicts: src/Symfony/Component/HttpKernel/Kernel.php
| * | | | | minor #18945 [Security] LdapUserProvider: add missing argument type doc (xabbuh)v3.1.1Nicolas Grekas2016-06-031-0/+1
| |\ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This PR was merged into the 3.1 branch. Discussion ---------- [Security] LdapUserProvider: add missing argument type doc | Q | A | ------------- | --- | Branch? | 3.1 | Bug fix? | no | New feature? | no | BC breaks? | no | Deprecations? | no | Tests pass? | yes | Fixed tickets | | License | MIT | Doc PR | Commits ------- bff9c36 LdapUserProvider: add missing argument type doc
| | * | | | | LdapUserProvider: add missing argument type docChristian Flothmann2016-06-011-0/+1
| | | | | | |
| * | | | | | [Security] Fix DebugAccessDecisionManager when object is not a scalarRomain Neutron2016-06-022-1/+51
| |/ / / / /
* | | | | | Merge branch '3.1'Fabien Potencier2016-05-262-5/+175
|\ \ \ \ \ \ | |/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 3.1: [Console] SymfonyStyle: Align multi-line/very-long-line blocks [Console][DX] Fixed ambiguous error message when using a duplicate option shortcut Fix js comment in profiler [Ldap] Fixed issue with Entry password attribute containing array of values and made password attribute configurable [Serializer][#18837] adding a test [Cache] Drop counting hit/miss in ProxyAdapter [Serializer] AbstractObjectNormalizer: be sure that isAllowedAttribute is called [Serializer] ObjectNormalizer: add missing parameters
| * | | | | [Ldap] Fixed issue with Entry password attribute containing array of values ↵v3.1.0-RC1v3.1.0Charles Sarrazin2016-05-262-5/+175
| | | | | | | | | | | | | | | | | | | | | | | | and made password attribute configurable
* | | | | | updated version to 3.2Fabien Potencier2016-05-131-1/+1
|/ / / / /
* | | | | Merge branch '3.0'v3.1.0-BETA1Nicolas Grekas2016-05-125-3/+25
|\ \ \ \ \ | |/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 3.0: (31 commits) Drop hirak/prestissimo [MonologBridge] Uninstallable together with symfony/http-kernel in 3.0.6 bumped Symfony version to 3.0.7 updated VERSION for 3.0.6 updated CHANGELOG for 3.0.6 bumped Symfony version to 2.8.7 updated VERSION for 2.8.6 updated CHANGELOG for 2.8.6 bumped Symfony version to 2.7.14 updated VERSION for 2.7.13 updated CHANGELOG for 2.7.13 bumped Symfony version to 2.3.42 [Debug] Fix fatal error handlers on PHP 7 updated VERSION for 2.3.41 update CONTRIBUTORS for 2.3.41 updated CHANGELOG for 2.3.41 fixed bad merge Fixed issue with blank password with Ldap limited the maximum length of a submitted username [2.3][Component/Security] Fixed phpdoc in AnonymousToken constructor for user param ... Conflicts: src/Symfony/Component/DependencyInjection/Compiler/AutowirePass.php src/Symfony/Component/DependencyInjection/Tests/Compiler/AutowirePassTest.php src/Symfony/Component/HttpKernel/Kernel.php
| * | | | Merge branch '2.8' into 3.0v3.0.7v3.0.6Fabien Potencier2016-05-092-1/+22
| |\ \ \ \ | | |/ / / | | | | | | | | | | | | | | | * 2.8: Fixed issue with blank password with Ldap
| | * | | security #18736 Fixed issue with blank password with Ldap (csarrazi)v2.8.7v2.8.6Fabien Potencier2016-05-092-1/+22
| | |\ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This PR was merged into the 2.8 branch. Discussion ---------- Fixed issue with blank password with Ldap | Q | A | ------------- | --- | Branch? | 1.8 | Bug fix? | no | New feature? | no | BC breaks? | no | Deprecations? | no | Tests pass? | yes | Fixed tickets | n/a | License | MIT | Doc PR | n/a Commits ------- c7d9c62 Fixed issue with blank password with Ldap
| | | * | | Fixed issue with blank password with LdapCharles Sarrazin2016-05-092-1/+22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The bind operation of LDAP, as described in RFC 4513, provides a method which allows for authentication of users. For the Simple Authentication Method a user may use the anonymous authentication mechanism, the unauthenticated authentication mechanism, or the name/password authentication mechanism. The unauthenticated authentication mechanism is used when a client who desires to establish an anonymous authorization state passes a non-zero length distinguished name and a zero length password. Most LDAP servers either can be configured to allow this mechanism or allow it by default. _Web-based applications which perform the simple bind operation with the client's credentials are at risk when an anonymous authorization state is established. This can occur when the web-based application passes a distinguished name and a zero length password to the LDAP server._ Thus, misconfiguring a server with simple bind can trick Symfony into thinking the username/password tuple as valid, potentially leading to unauthorized access.
| * | | | | Merge branch '2.8' into 3.0Fabien Potencier2016-05-091-0/+1
| |\ \ \ \ \ | | |/ / / / | | | | | | | | | | | | | | | | | | * 2.8: limited the maximum length of a submitted username
| | * | | | Merge branch '2.7' into 2.8Fabien Potencier2016-05-092-0/+2
| | |\ \ \ \ | | | | |/ / | | | |/| | | | | | | | | | | | | | * 2.7: limited the maximum length of a submitted username
| | | * | | Merge branch '2.3' into 2.7v2.7.13Fabien Potencier2016-05-092-0/+2
| | | |\ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.3: limited the maximum length of a submitted username
| | | | * | | limited the maximum length of a submitted usernamev2.3.42v2.3.41origin/2.3Fabien Potencier2016-05-091-0/+1
| | | | | | |
| * | | | | | Merge branch '2.8' into 3.0Fabien Potencier2016-05-092-2/+2
| |\ \ \ \ \ \ | | |/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.8: [2.3][Component/Security] Fixed phpdoc in AnonymousToken constructor for user param prevent calling get() for service_container service call get() after the container was compiled Fixed readme of OptionsResolver top-level anonymous services must be public [DependencyInjection] Suggest ExpressionLanguage in composer.json added a conflict between Monolog bridge 2.8 and HTTP Kernel 3.0+
| | * | | | | Merge branch '2.7' into 2.8Fabien Potencier2016-05-092-2/+2
| | |\ \ \ \ \ | | | |/ / / / | | | | | / / | | | |_|/ / | | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.7: [2.3][Component/Security] Fixed phpdoc in AnonymousToken constructor for user param prevent calling get() for service_container service call get() after the container was compiled Fixed readme of OptionsResolver [DependencyInjection] Suggest ExpressionLanguage in composer.json
| | | * | | Merge branch '2.3' into 2.7Fabien Potencier2016-05-092-2/+2
| | | |\ \ \ | | | | |/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.3: [2.3][Component/Security] Fixed phpdoc in AnonymousToken constructor for user param call get() after the container was compiled Fixed readme of OptionsResolver
| | | | * | minor #18727 [2.3][Component/Security] Fixed phpdoc in AnonymousToken ↵Fabien Potencier2016-05-092-2/+2
| | | | |\ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | constructor for user param (eriwin) This PR was squashed before being merged into the 2.3 branch (closes #18727). Discussion ---------- [2.3][Component/Security] Fixed phpdoc in AnonymousToken constructor for user param | Q | A | ------------- | --- | Branch? | 2.3 | Bug fix? | yes, phpdoc one | New feature? | no | BC breaks? | no | Deprecations? | no | Tests pass? | yes | Fixed tickets | - | License | MIT | Doc PR | - Updated phpdoc of AnonymousToken $user param from string to string|object since an object is allowed to in the parent AbstractToken: https://github.com/symfony/symfony/blob/2.3/src/Symfony/Component/Security/Core/Authentication/Token/AbstractToken.php#L91 Commits ------- b1c60b4 [2.3][Component/Security] Fixed phpdoc in AnonymousToken constructor for user param
| | | | | * | [2.3][Component/Security] Fixed phpdoc in AnonymousToken constructor for ↵Erik van Wingerden2016-05-092-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | user param
| * | | | | | Merge branch '2.8' into 3.0Fabien Potencier2016-05-031-0/+4
| |\ \ \ \ \ \ | | |/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.8: add @Event annotation for AuthenticationEvents bumped Symfony version to 2.8.6 [PropertyInfo] PHPDoc correction add @Event annotation for KernelEvents updated VERSION for 2.8.5 updated CHANGELOG for 2.8.5 bumped Symfony version to 2.7.13 updated VERSION for 2.7.12 update CONTRIBUTORS for 2.7.12 updated CHANGELOG for 2.7.12 bumped Symfony version to 2.3.41 updated VERSION for 2.3.40 update CONTRIBUTORS for 2.3.40 updated CHANGELOG for 2.3.40 Revert "minor #18257 [Routing] Don't needlessly execute strtr's as they are fairly expensive (arjenm)" Revert "fixed CS" fixed deprecation notices in tests [Security] Normalize "symfony/security-acl" dependency versions across all composer.json files [FrameworkBundle] Remove misleading comment bug #17460 [DI] fix ambiguous services schema
| | * | | | | Merge branch '2.7' into 2.8Fabien Potencier2016-05-031-0/+4
| | |\ \ \ \ \ | | | |/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.7: add @Event annotation for AuthenticationEvents add @Event annotation for KernelEvents bumped Symfony version to 2.7.13 updated VERSION for 2.7.12 update CONTRIBUTORS for 2.7.12 updated CHANGELOG for 2.7.12 bumped Symfony version to 2.3.41 updated VERSION for 2.3.40 update CONTRIBUTORS for 2.3.40 updated CHANGELOG for 2.3.40 Revert "minor #18257 [Routing] Don't needlessly execute strtr's as they are fairly expensive (arjenm)" Revert "fixed CS" [FrameworkBundle] Remove misleading comment bug #17460 [DI] fix ambiguous services schema
| | | * | | | Merge branch '2.3' into 2.7Fabien Potencier2016-05-031-0/+4
| | | |\ \ \ \ | | | | |/ / / | | | | | | / | | | | |_|/ | | | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * 2.3: add @Event annotation for AuthenticationEvents bumped Symfony version to 2.3.41 updated VERSION for 2.3.40 update CONTRIBUTORS for 2.3.40 updated CHANGELOG for 2.3.40 bug #17460 [DI] fix ambiguous services schema
| | | | * | add @Event annotation for AuthenticationEventsDaniel Espendiller2016-05-031-0/+4
| | | | |/
| * | | | Removed 3.0 restriction for the Ldap component in the Security componentv3.0.4Charles Sarrazin2016-03-161-1/+1
| | | | |
* | | | | move event listener method type hint docs to @Event annotations default ↵Daniel Espendiller2016-05-031-9/+2
| | | | | | | | | | | | | | | | | | | | value. makes it easily parsable by PhpStorm plugin
* | | | | bug #18693 add @Event annotation for AuthenticationEvents (Haehnchen)Fabien Potencier2016-05-031-0/+4
|\ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This PR was merged into the 3.1-dev branch. Discussion ---------- add @Event annotation for AuthenticationEvents | Q | A | ------------- | --- | Branch | 2.3 | Bug fix? | no | New feature? | no | BC breaks? | no | Deprecations? | no | Tests pass? | yes | Fixed tickets | #18684 | License | MIT split of #18684 for targeting 2.3 branch Commits ------- e2c1270 add @Event annotation for AuthenticationEvents
| * | | | | add @Event annotation for AuthenticationEventsDaniel Espendiller2016-05-021-0/+4
| | | | | |
* | | | | | [SecurityBundle] fixed DebugAccessDecisionManager configJules Pietri2016-04-281-0/+1
| | | | | |
generated by cgit v1.1 at 2025-05-10 18:51:50 +0000