PHP - Symfony
Notes
no notes yet
Changelog (since https://github.com/symfony/symfony/compare/v3.4.13...v3.4.14)
- security #cve-2018-14774 [HttpKernel] fix trusted headers management in HttpCache and InlineFragmentRenderer (@nicolas-grekas)
- security #cve-2018-14773 [HttpFoundation] Remove support for legacy and risky HTTP headers (@nicolas-grekas)
- bug #28003 [HttpKernel] Fixes invalid REMOTE_ADDR in inline subrequest when configuring trusted proxy with subnet (@netiul)
- bug #28007 [FrameworkBundle] fixed guard event names for transitions (@destillat)
- bug #28045 [HttpFoundation] Fix Cookie::isCleared (@ro0NL)
- bug #28080 [HttpFoundation] fixed using _method parameter with invalid type (@Phobetor)
- bug #28052 [HttpKernel] Fix merging bindings for controllers' locators (@nicolas-grekas)
[PR] https://github.com/symfony/symfony/pull/28102 [SECURITY] Security release