PHP - Symfony
Notes
no notes yet
Changelog (since https://github.com/symfony/symfony/compare/v2.7.37...v2.7.38)
- security #24995 Validate redirect targets using the session cookie domain (@nicolas-grekas)
- security #24994 Prevent bundle readers from breaking out of paths (@xabbuh)
- security #24993 Ensure that submitted data are uploaded files (@xabbuh)
- security #24992 Namespace generated CSRF tokens depending of the current scheme (@dunglas)
[PR] https://github.com/symfony/symfony/pull/24997 [SECURITY] Security release