From cf140018b21003a4639c031d04a7d6333effeab0 Mon Sep 17 00:00:00 2001 From: Fabien Potencier Date: Thu, 16 Nov 2017 19:14:38 +0100 Subject: [PATCH 1/2] updated CHANGELOG for 3.3.13 --- CHANGELOG-3.3.md | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/CHANGELOG-3.3.md b/CHANGELOG-3.3.md index 35fa3792f4..3102844440 100644 --- a/CHANGELOG-3.3.md +++ b/CHANGELOG-3.3.md @@ -7,6 +7,13 @@ in 3.3 minor versions. To get the diff for a specific change, go to https://github.com/symfony/symfony/commit/XXX where XXX is the change hash To get the diff between two versions, go to https://github.com/symfony/symfony/compare/v3.3.0...v3.3.1 +* 3.3.13 (2017-11-16) + + * security #24995 Validate redirect targets using the session cookie domain (nicolas-grekas) + * security #24994 Prevent bundle readers from breaking out of paths (xabbuh) + * security #24993 Ensure that submitted data are uploaded files (xabbuh) + * security #24992 Namespace generated CSRF tokens depending of the current scheme (dunglas) + * 3.3.12 (2017-11-13) * bug #24954 [DI] Fix dumping with custom base class (nicolas-grekas) From c41da93c910fce3090715d504b6b4387db3f1864 Mon Sep 17 00:00:00 2001 From: Fabien Potencier Date: Thu, 16 Nov 2017 19:14:43 +0100 Subject: [PATCH 2/2] updated VERSION for 3.3.13 --- src/Symfony/Component/HttpKernel/Kernel.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/Symfony/Component/HttpKernel/Kernel.php b/src/Symfony/Component/HttpKernel/Kernel.php index f58d8d2187..c5aa20930f 100644 --- a/src/Symfony/Component/HttpKernel/Kernel.php +++ b/src/Symfony/Component/HttpKernel/Kernel.php @@ -61,12 +61,12 @@ abstract class Kernel implements KernelInterface, TerminableInterface private $projectDir; - const VERSION = '3.3.13-DEV'; + const VERSION = '3.3.13'; const VERSION_ID = 30313; const MAJOR_VERSION = 3; const MINOR_VERSION = 3; const RELEASE_VERSION = 13; - const EXTRA_VERSION = 'DEV'; + const EXTRA_VERSION = ''; const END_OF_MAINTENANCE = '01/2018'; const END_OF_LIFE = '07/2018';