From 1ecbb32c3a89738cd46225b26ebe1a8ffde89c0f Mon Sep 17 00:00:00 2001 From: Christian Flothmann Date: Sat, 16 Jan 2016 17:20:11 +0100 Subject: [PATCH] update upgrade files with CSRF related option info --- UPGRADE-2.8.md | 26 +++++++++++++++++++------- UPGRADE-3.0.md | 30 ++++++++++++++++++++---------- 2 files changed, 39 insertions(+), 17 deletions(-) diff --git a/UPGRADE-2.8.md b/UPGRADE-2.8.md index 7acc2baa34..9ebaf0e0be 100644 --- a/UPGRADE-2.8.md +++ b/UPGRADE-2.8.md @@ -18,6 +18,12 @@ All components Form ---- + * The `intention` option was deprecated and will be removed in 3.0 in favor + of the new `csrf_token_id` option. + + * The `csrf_provider` option was deprecated and will be removed in 3.0 in favor + of the new `csrf_token_generator` option. + * The "cascade_validation" option was deprecated. Use the "constraints" option together with the `Valid` constraint instead. Contrary to "cascade_validation", "constraints" must be set on the respective child forms, @@ -203,7 +209,7 @@ Form * In Symfony 2.7 a small BC break was introduced with the new choices_as_values option. In order to have the choice values populated to the html value attribute you had to define the choice_value option. This is now not any more needed. - + Before: ```php @@ -221,9 +227,9 @@ Form }, )); ``` - + After (Symfony 2.8+): - + ```php $form->add('status', ChoiceType::class, array( 'choices' => array( @@ -262,13 +268,13 @@ Form } } ``` - + * The option "options" of the CollectionType has been renamed to "entry_options". The usage of the option "options" is deprecated and will be removed in Symfony 3.0. * The option "type" of the CollectionType has been renamed to "entry_type". The usage of the option "type" is deprecated and will be removed in Symfony 3.0. - As a value for the option you should provide the fully-qualified class name (FQCN) + As a value for the option you should provide the fully-qualified class name (FQCN) now as well. * Passing type instances to `Form::add()`, `FormBuilder::add()` and the @@ -409,8 +415,8 @@ DependencyInjection ``` - * `Symfony\Component\DependencyInjection\ContainerAware` has been deprecated, use - `Symfony\Component\DependencyInjection\ContainerAwareTrait` or implement + * `Symfony\Component\DependencyInjection\ContainerAware` has been deprecated, use + `Symfony\Component\DependencyInjection\ContainerAwareTrait` or implement `Symfony\Component\DependencyInjection\ContainerAwareInterface` manually WebProfiler @@ -522,12 +528,18 @@ Security * The `intention` option is deprecated for all the authentication listeners, and will be removed in 3.0. Use the `csrf_token_id` option instead. + * The `csrf_provider` option is deprecated for all the authentication listeners, + and will be removed in 3.0. Use the `csrf_token_generator` option instead. + SecurityBundle -------------- * The `intention` firewall listener setting is deprecated, and will be removed in 3.0. Use the `csrf_token_id` option instead. + * The `csrf_provider` firewall listener setting is deprecated, and will be removed in 3.0. + Use the `csrf_token_generator` option instead. + Config ------ diff --git a/UPGRADE-3.0.md b/UPGRADE-3.0.md index 9467925e56..afc996a81a 100644 --- a/UPGRADE-3.0.md +++ b/UPGRADE-3.0.md @@ -264,12 +264,12 @@ UPGRADE FROM 2.x to 3.0 // ... } ``` - + * The option "options" of the CollectionType has been renamed to "entry_options". * The option "type" of the CollectionType has been renamed to "entry_type". - As a value for the option you must provide the fully-qualified class name (FQCN) - now as well. + As a value for the option you must provide the fully-qualified class name (FQCN) + now as well. * The `FormIntegrationTestCase` and `FormPerformanceTestCase` classes were moved form the `Symfony\Component\Form\Tests` namespace to the `Symfony\Component\Form\Test` namespace. @@ -317,8 +317,8 @@ UPGRADE FROM 2.x to 3.0 * The `Symfony\Component\Form\Extension\Core\ChoiceList\SimpleChoiceList` class has been removed in favor of `Symfony\Component\Form\ChoiceList\ArrayChoiceList`. - - * The `TimezoneType::getTimezones()` method was removed. You should not use + + * The `TimezoneType::getTimezones()` method was removed. You should not use this method. * The `Symfony\Component\Form\ChoiceList\ArrayKeyChoiceList` class has been removed in @@ -365,11 +365,11 @@ UPGRADE FROM 2.x to 3.0 } } ``` - + * In Symfony 2.7 a small BC break was introduced with the new choices_as_values option. In order to have the choice values populated to the html value attribute you had to define the choice_value option. This is now not any more needed. - + Before: ```php @@ -389,9 +389,9 @@ UPGRADE FROM 2.x to 3.0 }, )); ``` - + After: - + ```php $form->add('status', ChoiceType::class, array( 'choices' => array( @@ -400,7 +400,7 @@ UPGRADE FROM 2.x to 3.0 'Ignored' => Status::IGNORED, ) )); - ``` + ``` * The `request` service was removed. You must inject the `request_stack` service instead. @@ -774,6 +774,16 @@ UPGRADE FROM 2.x to 3.0 } ``` + * The `intention` option was renamed to `csrf_token_id` for all the authentication listeners. + + * The `csrf_provider` option was renamed to `csrf_token_generator` for all the authentication listeners. + +### SecurityBundle + + * The `intention` firewall listener setting was renamed to `csrf_token_id`. + + * The `csrf_provider` firewall listener setting was renamed to `csrf_token_generator`. + ### Translator * The `Translator::setFallbackLocale()` method has been removed in favor of