summaryrefslogtreecommitdiffstats
path: root/Http
Commit message (Collapse)AuthorAgeFilesLines
...
| * | | [Security] Fix checkRequestPath doc; closes #2323Jeremy Mikola2011-11-071-1/+1
| | | |
* | | | merged branch dpb587/patch-sectok (PR #2414)Fabien Potencier2011-11-071-7/+7
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Commits ------- ab9caa0 [Security] Check for request's session before attempting writes. dabff0e [Security] Support removing tokens from a session. Discussion ---------- [Security] Support removing tokens from a session. Currently there is no way to remove a session's security token without invalidating the entire session and all its data (the ContextListener will only update the session if a token is non-null and non-anonymous). This patch fixes that. I consider this a bug and I found no tests to prove otherwise. Let me know if I'm mistaken. Originally mentioned at https://groups.google.com/d/topic/symfony-devs/ojLvh0WUbfo/discussion Bug fix: yes Feature addition: no Backwards compatibility break: no Symfony2 tests pass: yes Fixes the following tickets: - --------------------------------------------------------------------------- by ms937 at 2011/10/24 05:19:21 -0700 This change looks good to me. In fact I'm using similar patch in my app and it works as intended. Also, several other people requested this on the mailing list. Could someone from Symfony team merge this? Thanks.
| * | | | [Security] Check for request's session before attempting writes.Danny Berger2011-10-251-1/+3
| | | | |
| * | | | [Security] Support removing tokens from a session.Danny Berger2011-10-141-9/+7
| | | | |
* | | | | merged 2.0Fabien Potencier2011-11-071-1/+1
|\ \ \ \ \ | | |/ / / | |/| | / | |_|_|/ |/| | |
| * | | replace occurences of "an UserInteface" with "a UserInterface"Igor Wiedler2011-11-031-1/+1
| | |/ | |/|
* | | merged 2.0Fabien Potencier2011-10-297-11/+0
|\ \ \ | |/ /
| * | removed unused use statementsFabien Potencier2011-10-297-11/+0
| |/
* | moved management of the locale from the Session class to the Request classFabien Potencier2011-10-081-5/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The locale management does not require sessions anymore. In the Symfony2 spirit, the locale should be part of your URLs. If this is the case (via the special _locale request attribute), Symfony will store it in the request (getLocale()). This feature is now also configurable/replaceable at will as everything is now managed by the new LocaleListener event listener. How to upgrade: The default locale configuration has been moved from session to the main configuration: Before: framework: session: default_locale: en After: framework: default_locale: en Whenever you want to get the current locale, call getLocale() on the request (was on the session before).
* | Removed redundant "@return void"-sHelmer Aaviksoo2011-10-078-14/+0
|/
* merged branch helmer/target_path (PR #2228)Fabien Potencier2011-09-251-2/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Commits ------- 022a9a7 [Security] Make saving target_path extendible Discussion ---------- [Security] Make saving target_path extendible The problem lies in how Security component handles ``target_path`` - the latest request URI is always stored. This can lead to problems in following scenarios: a) The response type of the request is not HTML (think JSON, XML ..) b) The URI matches a route that does not listen to HTTP GET I opened a [PR](https://github.com/symfony/symfony/pull/604) months ago, to partly solve scenario A, which did not make it. Now I am proposing a different solution - user can extend ``ExceptionListener`` and override the logic behind setting the ``target_path`` to match his precise needs. In my simplified scenario, I would be using: ``` protected function setTargetPath(Request $request) { if ($request->isXmlHttpRequest() || 'GET' !== $request->getMethod()) { return; } $request->getSession()->set('_security.target_path', $request->getUri()); } ``` @Seldaek, @schmittjoh, @lsmith77, thoughts? --------------------------------------------------------------------------- by Seldaek at 2011/09/21 02:37:02 -0700 Seems like a better solution for flexibility's sake. Would be quite awesome if you could add a cookbook entry to symfony/symfony-docs about this, otherwise I'm afraid we'll have to explain it over and over again :) --------------------------------------------------------------------------- by helmer at 2011/09/21 03:38:57 -0700 [Cookbook](https://github.com/helmer/symfony-docs/commit/b22c5e666edb2586840884e32f8209425125c30d) entry done. Perhaps though I rushed ahead .. --------------------------------------------------------------------------- by Seldaek at 2011/09/21 03:52:01 -0700 Thanks. You can already do a pull request against symfony-docs, just reference this pull request in it so it's not merged before this is merged.
* Fixed the creation of the subrequestsChristophe Coevoet2011-09-181-0/+3
| | | | | | The subrequest must be created using an absolute path to keep the informations about the host and the base path. Closes #2168
* Added missing method to HTTP Digest entry pointStefano Sala2011-09-061-0/+10
|
* increased visibility of httpUtils propertyJohannes Schmitt2011-08-181-1/+2
|
* Using the $status parameter instead of fixed value when creating a ↵v2.0.0Henrik Westphal2011-07-241-1/+1
| | | | RedirectResponse.
* fixes #1659Johannes Schmitt2011-07-191-0/+5
|
* fixes several bugsJohannes Schmitt2011-07-191-15/+42
|
* merged branch schmittjoh/abstractAuthenticationListener (PR #1683)Fabien Potencier2011-07-131-8/+8
|\ | | | | | | | | | | | | | | | | | | | | | | Commits ------- 29e4063 [Security] changed order of checks to check for more specific things first Discussion ---------- [Security] changed order of checks
| * [Security] changed order of checks to check for more specific things firstJohannes Schmitt2011-07-131-8/+8
| |
* | [Security] fixes #1329Johannes Schmitt2011-07-131-1/+1
| |
* | Added a AccessDeniedHttpException to wrap the AccessDeniedException.Christophe Coevoet2011-07-111-5/+6
| | | | | | | | See #1631
* | [Security] fixed redirection URLs when using {_locale} in the patternFabien Potencier2011-07-111-0/+13
| |
* | [Security] tweaked previous commitFabien Potencier2011-07-051-0/+1
| |
* | [Security] removed a hackFabien Potencier2011-07-051-9/+14
| |
* | [Security] reverted change from previous mergeFabien Potencier2011-07-041-0/+6
| |
* | merged branch Herzult/testSecurity (PR #1447)Fabien Potencier2011-07-043-10/+2
|\ \ | |/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Commits ------- 164aea4 [Security] Add tests for the channel listener d51cbc0 [Security] Remove useless attribute in basic authentication listener & test it 91e6dc9 [Security] Add tests for the anonymous authentication listener 3c2affb [Security] Update access listener constructor's prototype and add tests 81afd77 [Security] Add tests for the firewall map aa6ae33 [Security] Remove useless attribute & var in firewall Discussion ---------- Test security --------------------------------------------------------------------------- by lsmith77 at 2011/06/29 13:41:07 -0700 @schmittjoh is probably the person to review this change ..
| * [Security] Remove useless attribute in basic authentication listener & test itAntoine Hérault2011-06-261-6/+0
| |
| * [Security] Update access listener constructor's prototype and add testsAntoine Hérault2011-06-261-2/+2
| |
| * [Security] Remove useless attribute & var in firewallAntoine Hérault2011-06-251-2/+0
| |
* | [Security] Fix http retry authentication entry pointAntoine Hérault2011-06-251-1/+1
| |
* | [Security] Fix http form authentication entry pointAntoine Hérault2011-06-251-1/+1
| |
* | [Security] Fix http digest authentication entry pointAntoine Hérault2011-06-251-1/+1
|/
* [Security] Fix http basic authentication entry pointAntoine Hérault2011-06-251-1/+1
|
* [Security] added an HttpUtils class to manage logic related to Requests and ↵Fabien Potencier2011-06-226-30/+135
| | | | | | | | | | | | | | Responses This change removes the need for the {_locale} hack. Now, all paths in the Security component can be: * An absolute path (/login) * An absolute URL (http://symfony.com/login) * A route name (login) So, if you want to use a path that includes a global parameter (like _locale), use a route instead of a path.
* Renamed core.* events to kernel.* and CoreEvents to KernelEventsJordi Boggiano2011-06-216-11/+8
|
* [Security] renamed UserProviderInterface::loadUser() to refreshUser()Fabien Potencier2011-06-161-1/+1
|
* made some tweaks to error levelsFabien Potencier2011-06-154-7/+7
|
* [Security] reverted some changes from previous mergeFabien Potencier2011-06-151-4/+1
|
* merged branch kaiwa/loglevel (PR #1073)Fabien Potencier2011-06-1510-18/+21
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Commits ------- cdf4b6a Checked log levels a45d3ee Reverted last commit 529381b ControllerNotFound: Changed log level from info to error. Also moved throw exception code block up, to prevent the message from beeing logged multiple times. 7c29e88 Changed log level of "Matched route ..." message from info to debug dca09fd Changed log level of "Using Controller ..." message from info to debug Discussion ---------- Log levels Just wanted to ask if the log level INFO is still correct for these messages? As there are only four log levels left (DEBUG, INFO, WARNING, ERROR), DEBUG might be the more appropriate level for these messages now. Let me give an example: An application is logging user actions (maybe to database) in order to assure comprehensibility, e. g. "User %s deleted post %d", "User %s written a message to user %s". These are not warnings of course, so the only suitable log level is INFO. But they will be thrown together with these very common (at least two per request?) "Using controller..." and "Matched route..." messages when choosing INFO as log level. --------------------------------------------------------------------------- by Seldaek at 2011/05/24 07:13:18 -0700 Agreed, this stuff is framework debug information. --------------------------------------------------------------------------- by fabpot at 2011/05/24 08:53:24 -0700 Why do you want to change these two specific ones? The framework uses the INFO level at other places too. Is it a good idea to say that the framework only logs with DEBUG? --------------------------------------------------------------------------- by stof at 2011/05/24 09:12:53 -0700 Doctrine logs at the INFO level too and I think it is useful to keep it as INFO. Being able to see the queries without having all DEBUG messages of the event dispatcher and security components is useful IMO. --------------------------------------------------------------------------- by Seldaek at 2011/05/25 02:30:24 -0700 Yeah, that's true, maybe we just need to reintroduce (again, meh:) NOTICE between INFO and WARNING. @kaiwa Of course the other way could be that you just add your DB handler to the app logger stack. That could be done in a onCoreRequest listener or such, basically you'd have to call `->pushHandler($yourDBHandler)` on the `monolog.logger.app` service. That way your messages will flow to it, but it won't receive noise from the framework stuff since those log on monolog.logger.request and other log channels. --------------------------------------------------------------------------- by fabpot at 2011/05/25 02:48:26 -0700 @Seldaek: I don't think we need another level. We just need to come up with a standard rules about the usage of each level. Adapted from log4j: * ERROR: Other runtime errors or unexpected conditions. * WARN: Use of deprecated APIs, poor use of API, 'almost' errors, other runtime that are undesirable or unexpected, but not necessarily "wrong" (unable to write to the profiler DB, ). * INFO: Interesting runtime events (security infos like the fact the user is logged-in or not, SQL logs, ...). * DEBUG: Detailed information on the flow through the system (route match, security flow infos like the fact that a token was found or that remember-me cookie is found, ...). What do you think? --------------------------------------------------------------------------- by stloyd at 2011/05/25 02:53:38 -0700 +1 for this standard (also this PR can be merged then), but we should review code for other "wrong" log levels usage (if everyone accept this standard) --------------------------------------------------------------------------- by fabpot at 2011/05/25 02:55:07 -0700 I won't merge this PR before all occurrences of the logger calls have been reviewed carefully and changed to the right level. --------------------------------------------------------------------------- by kaiwa at 2011/05/25 02:58:44 -0700 @fabpot: Just noticed these two occurring for every request in my log file. You are right, there are other places where this changes must be applied if we will change the log level. @stof: Hmm, i see. It is not possible to set the logger separately for each bundle, is it? That maybe would solve the problem. If somebody is interested in seeing the queries, he could set the log handler level to DEBUG for doctrine bundle, but still use INFO for the framwork itself. Plus he could even define a different output file or a completely different handler. I'm not sure if something like that is possible already (?) or realizable at all... just came into my mind. --------------------------------------------------------------------------- by Seldaek at 2011/05/25 03:01:07 -0700 Just FYI, from Monolog\Logger (which has CRITICAL and ALERT): * Debug messages const DEBUG = 100; * Messages you usually don't want to see const INFO = 200; * Exceptional occurences that are not errors * This is typically the logging level you want to use const WARNING = 300; * Errors const ERROR = 400; * Critical conditions (component unavailable, etc.) const CRITICAL = 500; * Action must be taken immediately (entire service down) * Should trigger alert by sms, email, etc. const ALERT = 550; The values kind of match http error codes too, 4xx are expected errors that are not really important (404s etc) and 5xx are server errors that you'd better fix ASAP. I'm ok with the descriptions, but I think alert and critical should be included too. I'll probably update Monolog docblocks to match whatever ends up in the docs. --------------------------------------------------------------------------- by Seldaek at 2011/05/25 03:03:21 -0700 @kaiwa you can do a lot, but not from the default monolog configuration entry, I'm not sure if we can really make that fully configurable without having a giant config mess. Please refer to my [comment above](https://github.com/symfony/symfony/pull/1073#issuecomment-1234316) to see how you could solve it. Maybe @fabpot has an idea how to make this more usable though. --------------------------------------------------------------------------- by stof at 2011/05/25 03:19:43 -0700 @Seldaek the issue is that the different logging channels are only know in the compiler pass, not in the DI extension. So changing the level in the extension is really hard IMO. Thus, the handlers are shared between the different logging channels (needed to open the log file only once for instance, or to send a single mail instead of one per channel) and the level is handled in the handlers, not the logger. I'm +1 for the standard, by adding the distinction between 400 and 500 status calls using ERROR and CRITICAL (which is already the case in the code). @kaiwa do you have time to review the calls to the logger between DEBUG and INFO or do you prefer I do it ? For instance, the Security component currently logs all message at DEBUG level and some of them should be INFO. --------------------------------------------------------------------------- by kaiwa at 2011/05/25 04:31:04 -0700 @stof ok i'll do that --------------------------------------------------------------------------- by kaiwa at 2011/05/25 12:22:51 -0700 Need some help :) I came across `ControllerNameParser::handleControllerNotFoundException()` which leads to redundant log messages currently: >[2011-05-25 20:53:16] request.INFO: Unable to find controller "AppBaseBundle:Blog" - class "App\BaseBundle\Controller\BlogController" does not exist. >[2011-05-25 20:53:16] request.ERROR: InvalidArgumentException: Unable to find controller "AppBaseBundle:Blog" - class "App\BaseBundle\Controller\BlogController" does not exist. (uncaught exception) at /home/ruth/symfony3/src/Symfony/Bundle/FrameworkBundle/Controller/ControllerNameParser.php line 87 Is it necessary to call `$this->logger->info($log);` if the InvalidArgumentException will be logged anyway? --------------------------------------------------------------------------- by stof at 2011/05/25 12:39:22 -0700 Well, the issue is that the ControllerNameParser logs messages and then uses them to throw an exception. I guess the logging call should be removed as it is redundant with the one of the ExceptionListener. @fabpot thoughts ? --------------------------------------------------------------------------- by kaiwa at 2011/05/27 11:39:25 -0700 I checked all debug, info and log calls. Sometimes it is hard to distinguish between the levels, so it would be great if someone reviews @cdf4b6a. @stof, maybe you want to take a look? --------------------------------------------------------------------------- by kaiwa at 2011/05/31 12:52:07 -0700 @stof, thanks for your comments. I added some replies above, please let me know your suggestions. --------------------------------------------------------------------------- by stof at 2011/05/31 14:04:22 -0700 @kaiwa As I said before, all the security logging calls should be DEBUG (most of them) or INFO (the one syaing that authentication succeeded for instance), but not WARN or ERROR as the exception don't go outside the firewall.
| * Checked log levelskaiwa2011-05-2710-18/+21
| |
* | fixed CSFabien Potencier2011-06-131-1/+1
| |
* | made logoutPath localizable as wellNed Schwartz2011-06-101-1/+3
| |
* | storing localized targetPath in a string as opposed to updating the attributeNed Schwartz2011-06-101-4/+3
| |
* | In the spirit of 882a8e3f09c602a6f0ed3b5bd20e8d4688331500 allow for ↵Ned Schwartz2011-06-101-0/+2
| | | | | | | | localized logout target url
* | fixed CSFabien Potencier2011-06-0816-16/+16
| |
* | fixed CSFabien Potencier2011-06-081-0/+2
| |
* | [Security] fixed sub-requests creation (closes #1212)Fabien Potencier2011-06-083-3/+5
| |
* | Added the support of the locale in the login path and the check pathChristophe Coevoet2011-06-062-7/+10
| |
* | [Security/Http] removed irrelevant codeJohannes M. Schmitt2011-06-031-2/+0
| |
* | added missing license headersFabien Potencier2011-05-317-0/+63
| |
* | merged origin/masterFabien Potencier2011-05-311-1/+1
|\ \
| * | [Security] fixed wrong function callFabien Potencier2011-05-301-1/+1
| | |
* | | merged origin/masterFabien Potencier2011-05-302-2/+11
|\ \ \ | |/ /
| * | Merge branch 'master' of http://github.com/symfony/symfony into securityJohannes M. Schmitt2011-05-301-5/+10
| |\ \
| * \ \ Merge branch 'master' of git://github.com/symfony/symfony into securityJohannes Schmitt2011-05-281-0/+1
| |\ \ \
| * | | | [Security/Http] use deep parameter for CSRF parameterJohannes Schmitt2011-05-181-1/+1
| | | | |
| * | | | Merge remote branch 'origin/master' into securityJohannes Schmitt2011-05-181-2/+2
| |\ \ \ \ | | | |_|/ | | |/| | | | | | | | | | | | Conflicts: src/Symfony/Bundle/FrameworkBundle/Listener/RequestAttributeInitializingListener.php
| * | | | [Security/Http] better error message when session times out, or cookies are ↵Johannes Schmitt2011-05-141-0/+9
| | | | | | | | | | | | | | | | | | | | disabled
| * | | | [Security/Http] {_locale} can be used as placeholder in target path generationJohannes Schmitt2011-05-141-1/+1
| | | | | | | | | | | | | | | | | | | | fixes #861
* | | | | [Security] fixed event namesFabien Potencier2011-05-305-7/+7
| | | | |
* | | | | [Security] removed obsolete use statementsFabien Potencier2011-05-306-6/+0
| | | | |
* | | | | renamed constants to upper casedFabien Potencier2011-05-302-2/+2
| | | | |
* | | | | Merge remote branch 'Seldaek/events' into events1Fabien Potencier2011-05-307-19/+19
|\ \ \ \ \ | |_|_|_|/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Seldaek/events: [EventDispatcher] Removed temporary code [FrameworkBundle] Improved code readability [FrameworkBundle] Clarified code and fixed regression Update Core and Security events to latest model [EventDispatcher] Allow registration of arbitrary callbacks [EventDispatcher] Remove useless code [EventDispatcher] Minor memory optimization to getListeners() [FrameworkBundle] Small optimization, remove some function calls
| * | | | Update Core and Security events to latest modelJordi Boggiano2011-05-267-18/+18
| | | | | | | | | | | | | | | | | | | | | | | | | The main benefit is that in XML/YML files we have common syntax (i.e. core.controller, form.pre_bind) that properly namespaces event names (before: onCoreController was ok, preBind was not). On the other hand in PHP land we also have namespaced events, CoreEvents::controller, FormEvents::preBind, before it was Events::onCoreController, Events::onPreBind, we now have more context.
| * | | | [EventDispatcher] Allow registration of arbitrary callbacksJordi Boggiano2011-05-261-1/+1
| | |/ / | |/| | | | | | | | | | | | | | This in effect removes the direct link between event name and the method name on the handler. Any callback can be given as a handler and the event name becomes an arbitrary string. Allowing for easier namespacing (see next commit)
* | | | [Various] Fixed phpdocPascal Borreli2011-05-291-5/+10
| |_|/ |/| |
* | | [Security] Adding tests and then fixing bug where ContextListener did no loggingRyan Weaver2011-05-261-0/+1
|/ /
* | [Security] updated with "intention"Kris Wallsmith2011-05-161-2/+2
|/
* [Security] use deep flag when retrieving username + passwordJohannes Schmitt2011-05-102-3/+3
|
* [Security][HttpFoundation] splits Request::hasSession() into hasSession(), ↵Johannes Schmitt2011-05-051-1/+1
| | | | | | and hasPreviousSession() This closes #774, and fixes #772.
* [Phpdoc] Cleaning/fixingPascal Borreli2011-04-239-28/+32
|
* Merge remote branch 'bschussek/form-extensions'Fabien Potencier2011-04-231-1/+1
|\ | | | | | | | | | | | | * bschussek/form-extensions: [Form] Refactored code from CoreExtension to new ValidatorExtension [Form] Added FormTypeExtensionInterface [Form] Reorganized code into "form extensions"
| * [Form] Reorganized code into "form extensions"Bernhard Schussek2011-04-221-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The extension classes are now the only constructor argument of the FormFactory class. They replace the existing "type loader" classes. new FormFactory(array( new CoreExtension($validator, $storage), new CsrfExtension($csrfProvider), new DoctrineOrmExtension($em), )); Together with a few upcoming commits this mechanism will make * extension of the form framework in bundles and * usage of the forms outside of Symfony2 much easier.
* | Fixed various typoPascal Borreli2011-04-222-2/+2
|/
* fixes a bug in the SwitchUserListenerJohannes M. Schmitt2011-04-191-1/+4
|
* [Security] fixed URLFabien Potencier2011-04-121-1/+1
|
* [Security] Remove unneeded and invalid use statementJordi Boggiano2011-04-051-1/+0
|
* [SecurityBundle] fixed missing argument EventDisplatcher in RememberMe serviceAlexey Popkov2011-03-242-0/+2
|
* [Security] Removed useless method callChristophe Coevoet2011-03-231-2/+0
|
* [Security] Fixed some listeners not updated after the event refactoringChristophe Coevoet2011-03-223-5/+5
|
* Merge remote branch 'mvrhov/variousFixes'Fabien Potencier2011-03-211-2/+0
|\
| * removed unecessary use statements (ExceptionEvent was also undefined namespace)Miha Vrhovnik2011-03-211-2/+0
| |
* | Merge branch 'interactive-login-event' of git://github.com/yethee/symfony ↵Johannes M. Schmitt2011-03-211-1/+2
|\ \ | |/ |/| | | into security
| * [Security] Added a type hint.Deni2011-03-191-1/+2
| |
* | Fixing failure on forward which was broken by Event refactoringMiha Vrhovnik2011-03-191-1/+1
| |
* | fix to use setExceptionAmal Raghav2011-03-191-2/+2
|/
* Merge remote branch 'schmittjoh/security'Fabien Potencier2011-03-181-1/+1
|\
| * [Security] removed un-needed event parameter from many interfacesJohannes Schmitt2011-03-1812-34/+25
| |
* | Merge remote branch 'ornicar/removeNamespaceInSwitchUserListener'Fabien Potencier2011-03-181-1/+0
|\ \
| * | [Security] Remove duplicated namespace in SwitchUserListenerornicar2011-03-181-1/+0
| |/
* | [Security] removed un-needed event parameter from many interfacesJohannes Schmitt2011-03-1812-33/+24
|/
* [Security] fixed typosFabien Potencier2011-03-181-2/+2
|
* fixed various bugs introduced during the event system migrationFabien Potencier2011-03-183-8/+12
|
* renamed filterCore* to onCore*Fabien Potencier2011-03-171-1/+1
| | | | | | The onCore* events are fired at some pre-defined points during the handling of a request. At this is more important than the fact that you can change things from the event.
* fixed phpdocFabien Potencier2011-03-173-3/+3
|
* renamed some methods in the event dispatcherFabien Potencier2011-03-176-7/+7
|
* [Security] Fixed method names in the Firewall listenersBernhard Schussek2011-03-1715-15/+15
|
* [Security] Fixed method calls on EventDispatcherBernhard Schussek2011-03-172-2/+2
|
* Merge remote branch 'symfony/master' into event-managerBernhard Schussek2011-03-173-5/+5
|\ | | | | | | | | | | | | | | | | | | | | Conflicts: src/Symfony/Bundle/AsseticBundle/CacheWarmer/AssetWriterCacheWarmer.php src/Symfony/Bundle/AsseticBundle/Tests/CacheWarmer/AssetWriterCacheWarmerTest.php src/Symfony/Bundle/FrameworkBundle/Profiler/ProfilerListener.php src/Symfony/Bundle/FrameworkBundle/Resources/config/profiling.xml src/Symfony/Component/HttpKernel/HttpKernel.php src/Symfony/Component/Security/Http/Firewall/AbstractAuthenticationListener.php src/Symfony/Component/Security/Http/Firewall/AbstractPreAuthenticatedListener.php
| * [Security] added some finals, some visibility changesJohannes M. Schmitt2011-03-133-4/+4
| |
generated by cgit v1.1 at 2025-05-22 14:37:03 +0000