PHP - Symfony
Notes
no notes yet
Changelog (since https://github.com/symfony/symfony/compare/v4.1.2...v4.1.3)
- security #cve-2018-14774 [HttpKernel] fix trusted headers management in HttpCache and InlineFragmentRenderer (@nicolas-grekas)
- security #cve-2018-14773 [HttpFoundation] Remove support for legacy and risky HTTP headers (@nicolas-grekas)
- bug #28003 [HttpKernel] Fixes invalid REMOTE_ADDR in inline subrequest when configuring trusted proxy with subnet (@netiul)
- bug #28007 [FrameworkBundle] fixed guard event names for transitions (@destillat)
- bug #28045 [HttpFoundation] Fix Cookie::isCleared (@ro0NL)
- bug #28080 [HttpFoundation] fixed using _method parameter with invalid type (@Phobetor)
- bug #28059 [Messenger] Fix error message on undefined message class for non-subscriber handler (@chalasr)
- bug #28052 [HttpKernel] Fix merging bindings for controllers' locators (@nicolas-grekas)
- bug #28014 [Messenger] Fix chaining senders with their aliases (@sroze)
[PR] https://github.com/symfony/symfony/pull/28104 [SECURITY] Security release