Commit Graph

53731 Commits

Author SHA1 Message Date
Fabien Potencier
3552d33cac
Merge pull request #41279 from fabpot/release-5.2.9
released v5.2.9
2021-05-19 14:23:59 +02:00
Fabien Potencier
07e52ce41a Update VERSION for 5.2.9 2021-05-19 14:23:45 +02:00
Fabien Potencier
f83fb24062 Update CHANGELOG for 5.2.9 2021-05-19 14:23:40 +02:00
Nicolas Grekas
309f36df6a Merge branch '4.4' into 5.2
* 4.4:
  [Security\Core] Fix user enumeration via response body on invalid credentials
  Update VERSION for 3.4.48
  Update CHANGELOG for 3.4.48
2021-05-19 14:08:15 +02:00
Nicolas Grekas
cbdb66a1d1 Merge branch '3.4' into 4.4
* 3.4:
  [Security\Core] Fix user enumeration via response body on invalid credentials
  Update VERSION for 3.4.48
  Update CHANGELOG for 3.4.48
2021-05-19 14:06:31 +02:00
Nicolas Grekas
1ad13fec2e security #cve-2021-21424 [Security\Core] Fix user enumeration via response body on invalid credentials (chalasr)
This PR was merged into the 3.4 branch.
2021-05-19 14:03:21 +02:00
Robin Chalas
e85070088e [Security\Core] Fix user enumeration via response body on invalid credentials 2021-05-19 14:03:21 +02:00
Fabien Potencier
0d514d16a9 Merge branch '4.4' into 5.2
* 4.4:
  minor #41065 [Security] Added missing translations for Serbian (sr_Cyrl)
  [Security] Added missing translations for Serbian (sr_Latn) #41066
2021-05-19 13:57:29 +02:00
Fabien Potencier
5f8035e121 minor #41261 [Security] Added missing translations for Serbian (sr_Latn) (AJ-computerrock)
This PR was merged into the 4.4 branch.

Discussion
----------

[Security] Added missing translations for Serbian (sr_Latn)

| Q             | A
| ------------- | ---
| Branch?       | 4.4
| Bug fix?      | no
| New feature?  | no
| Deprecations? | no
| Tickets       | Fix #41066
| License       | MIT
| Doc PR        |

Added 2 missing translations  for Serbian (sr_Latn).

Commits
-------

ce31fc3643 [Security] Added missing translations for Serbian (sr_Latn) #41066
2021-05-19 13:56:33 +02:00
Fabien Potencier
853b1dc57b minor #41263 [Security] Added missing translations for Serbian (sr_Cyrl) (ajakov)
This PR was merged into the 4.4 branch.

Discussion
----------

[Security] Added missing translations for Serbian (sr_Cyrl)

| Q             | A
| ------------- | ---
| Branch?       | 4.4
| Bug fix?      | no
| New feature?  | no
| Deprecations? | no
| Tickets       | Fix #41065
| License       | MIT
| Doc PR        |

Added 2 missing translations.

Commits
-------

0e3165c67d minor #41065 [Security] Added missing translations for Serbian (sr_Cyrl)
2021-05-19 13:54:43 +02:00
Fabien Potencier
ed92c99534 bug #41275 Fixes Undefined method call (faizanakram99)
This PR was submitted for the 5.x branch but it was merged into the 5.2 branch instead.

Discussion
----------

Fixes Undefined method call

Psalm reported this

```
ERROR: UndefinedMethod - vendor/symfony/framework-bundle/Kernel/MicroKernelTrait.php:185:148 - Method ReflectionType::isBuiltin does not exist (see https://psalm.dev/022)
        $configuratorClass = $configureRoutes->getNumberOfParameters() > 0 && ($type = $configureRoutes->getParameters()[0]->getType()) && !$type->isBuiltin() ? $type->getName() : null;
```

| Q             | A
| ------------- | ---
| Branch?       | 4.4
| Bug fix?      | yes
| New feature?  | no
| Deprecations? | no
| Tickets       | Fix #... <!-- prefix each issue number with "Fix #", no need to create an issue if none exist, explain below instead -->
| License       | MIT
| Doc PR        |
<!--
Replace this notice by a short README for your feature/bugfix. This will help people
understand your PR and can be used as a start for the documentation.

Additionally (see https://symfony.com/releases):
 - Always add tests and ensure they pass.
 - Never break backward compatibility (see https://symfony.com/bc).
 - Bug fixes must be submitted against the lowest maintained branch where they apply
   (lowest branches are regularly merged to upper ones so they get the fixes too.)
 - Features and deprecations must be submitted against branch 5.x.
 - Changelog entry should follow https://symfony.com/doc/current/contributing/code/conventions.html#writing-a-changelog-entry
-->

Commits
-------

6dba988629 Fixes Undefined method call
2021-05-19 13:52:24 +02:00
Faizan Akram Dar
6dba988629 Fixes Undefined method call
Psalm reported this

```
ERROR: UndefinedMethod - vendor/symfony/framework-bundle/Kernel/MicroKernelTrait.php:185:148 - Method ReflectionType::isBuiltin does not exist (see https://psalm.dev/022)
        $configuratorClass = $configureRoutes->getNumberOfParameters() > 0 && ($type = $configureRoutes->getParameters()[0]->getType()) && !$type->isBuiltin() ? $type->getName() : null;
```
2021-05-19 13:52:18 +02:00
Nicolas Grekas
d1d83c29b9 [SecurityBundle] add missing type-hint 2021-05-19 12:09:09 +02:00
Nicolas Grekas
a660c1c68f Merge branch '4.4' into 5.2
* 4.4:
  add chinese translation
2021-05-19 11:59:29 +02:00
Fabien Potencier
8ff65422b2 bug #41269 [SecurityBundle] Remove invalid unused service (chalasr)
This PR was merged into the 5.2 branch.

Discussion
----------

[SecurityBundle] Remove invalid unused service

| Q             | A
| ------------- | ---
| Branch?       | 5.2
| Bug fix?      | yes
| New feature?  | no
| Deprecations? | no
| Tickets       | -
| License       | MIT
| Doc PR        | -

Leftover of a revisited experimental feature (the class defined on the service does not exist).

Commits
-------

1e6588a848 [SecurityBundle] Remove invalid unused service
2021-05-19 08:38:01 +02:00
Fabien Potencier
3ae7e0a60d minor #41246 [Security] Missing translations for Chinese (zh_TW & zh_CN) (fd6130)
This PR was merged into the 4.4 branch.

Discussion
----------

[Security] Missing translations for Chinese (zh_TW & zh_CN)

| Q             | A
| ------------- | ---
| Branch?       | 4.4 <!-- see below -->
| Bug fix?      | no
| New feature?  | no <!-- please update src/**/CHANGELOG.md files -->
| Deprecations? | no <!-- please update UPGRADE-*.md and src/**/CHANGELOG.md files -->
| Tickets       | Fix #41037 , Fix #41038 <!-- prefix each issue number with "Fix #", no need to create an issue if none exist, explain below instead -->
| License       | MIT
| Doc PR        | no <!-- required for new features -->
<!--
Replace this notice by a short README for your feature/bugfix. This will help people
understand your PR and can be used as a start for the documentation.

Additionally (see https://symfony.com/releases):
 - Always add tests and ensure they pass.
 - Never break backward compatibility (see https://symfony.com/bc).
 - Bug fixes must be submitted against the lowest maintained branch where they apply
   (lowest branches are regularly merged to upper ones so they get the fixes too.)
 - Features and deprecations must be submitted against branch 5.x.
 - Changelog entry should follow https://symfony.com/doc/current/contributing/code/conventions.html#writing-a-changelog-entry
-->

Added missing translation for Chinese (zh_TW & zh_CN).

Commits
-------

26d156f17f add chinese translation
2021-05-19 08:29:58 +02:00
Robin Chalas
1e6588a848
[SecurityBundle] Remove invalid unused service 2021-05-19 01:02:18 +02:00
Wouter de Jong
e83c9927af bug #41139 [Security] [DataCollector] Remove allows anonymous information in datacollector (ismail1432)
This PR was submitted for the 5.x branch but it was squashed and merged into the 5.2 branch instead.

Discussion
----------

[Security] [DataCollector] Remove allows anonymous information in datacollector

| Q             | A
| ------------- | ---
| Branch?       | 5.2
| Bug fix?      | no
| New feature?  | yes/no <!-- please update src/**/CHANGELOG.md files -->
| Deprecations? | yes/no <!-- please update UPGRADE-*.md and src/**/CHANGELOG.md files -->
| Tickets       | Fix #40907
| License       | MIT
| Doc PR        | symfony/symfony-docs#... <!-- required for new features -->

As mentioned In https://github.com/symfony/symfony/issues/40907 there is no longer anonymous users no longer in the new authentication system. This PR remove this information **if the new system is used** as it always a red cross

With  `enable_authenticator_manager` at `false`
![image](https://user-images.githubusercontent.com/13260307/117574692-34c8d900-b0d6-11eb-9bef-a6c9abdfad2f.png)

With  `enable_authenticator_manager` at `true`
![image](https://user-images.githubusercontent.com/13260307/117574619-f3382e00-b0d5-11eb-945a-3613425ccdbe.png)

Commits
-------

92cd096763 [Security] [DataCollector] Remove allows anonymous information in datacollector
2021-05-18 15:25:32 +02:00
Smaine Milianni
92cd096763 [Security] [DataCollector] Remove allows anonymous information in datacollector 2021-05-18 15:25:25 +02:00
ajakov
0e3165c67d minor #41065 [Security] Added missing translations for Serbian (sr_Cyrl) 2021-05-18 10:51:58 +02:00
Aleksandar Jakovljevic
ce31fc3643 [Security] Added missing translations for Serbian (sr_Latn) #41066 2021-05-18 10:13:34 +02:00
Robin Chalas
2e047c9cfa
minor #41258 [Workflow] Remove useless call to Definition#addTag() (chalasr)
This PR was merged into the 5.2 branch.

Discussion
----------

[Workflow] Remove useless call to `Definition#addTag()`

| Q             | A
| ------------- | ---
| Branch?       | 5.2
| Bug fix?      |  no
| New feature?  | no
| Deprecations? | no
| Tickets       | -
| License       | MIT
| Doc PR        | -

Commits
-------

324dc750de [Workflow] Remove dead call to `Defnition#addTag()`
2021-05-18 00:56:52 +02:00
Robin Chalas
324dc750de
[Workflow] Remove dead call to Defnition#addTag() 2021-05-17 23:23:45 +02:00
Alexander M. Turek
65e1226fa4 Fix merge 2021-05-17 22:21:27 +02:00
Alexander M. Turek
0c8234b50c Merge branch '4.4' into 5.2
* 4.4:
  Fix deprecations from Doctrine Annotations+Cache
2021-05-17 21:35:40 +02:00
Alexander M. Turek
373528fce2 bug #41230 [FrameworkBundle][Validator] Fix deprecations from Doctrine Annotations+Cache (derrabus)
This PR was merged into the 4.4 branch.

Discussion
----------

[FrameworkBundle][Validator] Fix deprecations from Doctrine Annotations+Cache

| Q             | A
| ------------- | ---
| Branch?       | 4.4
| Bug fix?      | yes
| New feature?  | no
| Deprecations? | no
| Tickets       | N/A
| License       | MIT
| Doc PR        | N/A

* Doctrine Annotations' `CachedReader` is deprecated. Let's not use it if we don't have to.
* Doctrine Cache 2 has been released. Since we're mostly only using the interfaces, we can indicate compatibility.

Paslm is going to complain about missing classes, which is kind-of expected here. 🙂

Commits
-------

ec51c21a9d Fix deprecations from Doctrine Annotations+Cache
2021-05-17 21:13:41 +02:00
Alexander M. Turek
ec51c21a9d Fix deprecations from Doctrine Annotations+Cache 2021-05-16 23:41:25 +02:00
fd6130
26d156f17f add chinese translation 2021-05-16 22:49:50 +08:00
Fabien Potencier
e7692c50bd Merge branch '4.4' into 5.2
* 4.4:
  [Finder] Fix gitignore regex build with "**"
  Fixed deprecation warnings about passing null as parameter
  [Security] Keep Bulgarian wording consistent across all texts.
  Migrate configuration file for PHP CS Fixer 2.19/3.0
  [Form] Replace broken ServerParams mock
2021-05-16 15:07:46 +02:00
Fabien Potencier
907f1033ad minor #41244 [Security] Keep Bulgarian wording consistent across all texts (Warxcell)
This PR was merged into the 4.4 branch.

Discussion
----------

[Security] Keep Bulgarian wording consistent across all texts

| Q             | A
| ------------- | ---
| Branch?       | 4.4
| Bug fix?      | no
| New feature?  | no
| Deprecations? | no
| Tickets       |
| License       | MIT
| Doc PR        |

Keep wording consistent across all texts in translations:

Trans unit id=17:
Too many === Твърде много
Trans unit id=19:
Too many === Прекалено много

I put word "Твърде", because it was used before.

Commits
-------

4f1b4f993e [Security] Keep Bulgarian wording consistent across all texts.
2021-05-16 15:01:26 +02:00
Fabien Potencier
518badd980 minor #41243 Migrate configuration file for PHP CS Fixer 2.19/3.0 (derrabus)
This PR was merged into the 4.4 branch.

Discussion
----------

Migrate configuration file for PHP CS Fixer 2.19/3.0

| Q             | A
| ------------- | ---
| Branch?       | 4.4
| Bug fix?      | no
| New feature?  | no
| Deprecations? | no
| Tickets       | N/A
| License       | MIT
| Doc PR        | N/A

This PR suggests to rename the PHP CS Fixer configuration file as expected by version 2.19 and 3.0. I don't know what version Fabbot is currently running, but as soon as it is updated to 2.19, we can merge this PR.

Commits
-------

1462a3215e Migrate configuration file for PHP CS Fixer 2.19/3.0
2021-05-16 14:39:59 +02:00
Fabien Potencier
21b8cb7d4f bug #41206 [Mailer] Fix SES API call with UTF-8 Addresses (jderusse)
This PR was merged into the 5.2 branch.

Discussion
----------

[Mailer] Fix SES API call with UTF-8 Addresses

| Q             | A
| ------------- | ---
| Branch?       | 5.2
| Bug fix?      | yes
| New feature?  | no
| Deprecations? | no
| Tickets       | -
| License       | MIT
| Doc PR        | -

The address (including email and name) used in Amazon SES API (`ses+api://`) must not contain unicode chars  (https://docs.aws.amazon.com/ses/latest/APIReference-V2/API_Destination.html)

This PR encodes name with base64 as suggested by issues in Official AWS SDKs (https://github.com/aws/aws-sdk-php/issues/1196, https://github.com/aws/aws-sdk-js/issues/1585)

note: I did not use the Base64Encoder, because the address could not be chunked (API Call failed) and it looks like addresses wider than 64 chars are allowed.

Commits
-------

05a9497230 [Mailer] Fix SES API call with UTF-8 Addresses
2021-05-16 14:29:02 +02:00
Fabien Potencier
eb3a3c1c0a bug #41240 Fixed deprecation warnings about passing null as parameter (derrabus)
This PR was merged into the 4.4 branch.

Discussion
----------

Fixed deprecation warnings about passing null as parameter

| Q             | A
| ------------- | ---
| Branch?       | 4.4
| Bug fix?      | yes
| New feature?  | no
| Deprecations? | no
| Tickets       | N/A
| License       | MIT
| Doc PR        | N/A

Various built-in PHP functions will trigger a deprecation warning if `null` is passed as parameter. This PR attempts to fix all warnings that our test suite currently picks up.

Commits
-------

7d9bdf5734 Fixed deprecation warnings about passing null as parameter
2021-05-16 14:27:45 +02:00
Fabien Potencier
03519d40b8 bug #41241 [Finder] Fix gitignore regex build with "**" (mvorisek)
This PR was squashed before being merged into the 4.4 branch.

Discussion
----------

[Finder] Fix gitignore regex build with "**"

| Q             | A
| ------------- | ---
| Branch?       | 4.4
| Bug fix?      | yes
| New feature?  | no
| Deprecations? | no
| Tickets       | Fix #41223
| License       | MIT
| Doc PR        | no

covered with tests, also faster, we do not have to explode the rule at all :)

ping `@lindelius` `@OskarStark`

Commits
-------

ce22d5ddd7 [Finder] Fix gitignore regex build with "**"
2021-05-16 14:25:11 +02:00
Michael Voříšek
ce22d5ddd7 [Finder] Fix gitignore regex build with "**" 2021-05-16 14:25:02 +02:00
Alexander M. Turek
7d9bdf5734 Fixed deprecation warnings about passing null as parameter 2021-05-16 11:52:47 +02:00
Nicolas Grekas
d3ebc5fd53 minor #41238 [Form] Replace broken ServerParams mock (derrabus)
This PR was merged into the 4.4 branch.

Discussion
----------

[Form] Replace broken ServerParams mock

| Q             | A
| ------------- | ---
| Branch?       | 4.4
| Bug fix?      | yes
| New feature?  | no
| Deprecations? | no
| Tickets       | N/A
| License       | MIT
| Doc PR        | N/A

`AbstractRequestHandlerTest` creates a mocked version of the `ServerParams` class. Since `getNormalizedIniPostMaxSize()` does not have a return type declaration, PHPUnit will by default create an implementation that always returns `null`. However, the real implementation of that method guarantees to always return a string.

This becomes problematic in PHP 8.1 because the return value is sometimes passed as-is into functions like `strtolower()` which trigger a deprecation warning on `null` now.

This PR proposes to replace the mock with a dummy implementation that returns an empty string by default.

Commits
-------

77c2d69f19 [Form] Replace broken ServerParams mock
2021-05-16 10:57:09 +02:00
Warxcell
4f1b4f993e [Security] Keep Bulgarian wording consistent across all texts. 2021-05-16 11:22:39 +03:00
Alexander M. Turek
1462a3215e Migrate configuration file for PHP CS Fixer 2.19/3.0 2021-05-15 21:29:53 +02:00
Alexander M. Turek
77c2d69f19 [Form] Replace broken ServerParams mock 2021-05-15 16:44:53 +02:00
Alexander M. Turek
ec761d6b94 Merge branch '4.4' into 5.2
* 4.4:
  Update .github/workflows/tests.yml
  Don't call class_exists() on null
  Added and improved Bulgarian translations
  PHP 8.1 must not cause the build to fail (yet)
  Add _run_tests bash function
  Add a GitHub Action for tests against PHP 8.1
  [HttpClient] fix adding query string to relative URLs with scoped clients
  [Security] Added Ukrainian translations
2021-05-15 14:42:34 +02:00
Nyholm
dffdc71adb
minor #41080 Add a GitHub Action for tests against PHP 8.1 (derrabus, Nyholm)
This PR was merged into the 4.4 branch.

Discussion
----------

Add a GitHub Action for tests against PHP 8.1

| Q             | A
| ------------- | ---
| Branch?       | 4.4
| Bug fix?      | no
| New feature?  | no
| Deprecations? | no
| Tickets       | N/A
| License       | MIT
| Doc PR        | N/A

I'd like to monitor our compatibility with the upcoming PHP 8.1 release. Because I failed miserably at convincing Travis to run our tests with PHP 8.1 (see #40532), I tried to do the same with GitHub Actions.

Commits
-------

6a328ae01e Update .github/workflows/tests.yml
6f1c4b8c58 PHP 8.1 must not cause the build to fail (yet)
b0b45105d7 Add _run_tests bash function
de4f0170e2 Add a GitHub Action for tests against PHP 8.1
2021-05-15 10:53:02 +02:00
Jérémy Derussé
05a9497230
[Mailer] Fix SES API call with UTF-8 Addresses 2021-05-15 10:47:28 +02:00
Tobias Nyholm
6a328ae01e
Update .github/workflows/tests.yml 2021-05-15 10:42:08 +02:00
Nicolas Grekas
3b0c6f9ae7 bug #41224 [HttpClient] fix adding query string to relative URLs with scoped clients (nicolas-grekas)
This PR was merged into the 4.4 branch.

Discussion
----------

[HttpClient] fix adding query string to relative URLs with scoped clients

| Q             | A
| ------------- | ---
| Branch?       | 4.4
| Bug fix?      | yes
| New feature?  | no
| Deprecations? | no
| Tickets       | Fix #41220
| License       | MIT
| Doc PR        | -

Commits
-------

5ccba2c3e5 [HttpClient] fix adding query string to relative URLs with scoped clients
2021-05-15 10:05:42 +02:00
Nicolas Grekas
9e12a383ee bug #41233 [DependencyInjection][ProxyManagerBridge] Don't call class_exists() on null (derrabus)
This PR was merged into the 4.4 branch.

Discussion
----------

[DependencyInjection][ProxyManagerBridge] Don't call class_exists() on null

| Q             | A
| ------------- | ---
| Branch?       | 4.4
| Bug fix?      | yes
| New feature?  | no
| Deprecations? | no
| Tickets       | N/A
| License       | MIT
| Doc PR        | N/A

PHP 8.1 complains if we pass `null` to `class_exists()` or `interface_exists()`:

> class_exists(): Passing null to parameter `#1` ($class) of type string is deprecated

Commits
-------

88520e53b2 Don't call class_exists() on null
2021-05-15 10:05:00 +02:00
Nyholm
a7d3533619
minor #41192 [Security] Added Ukrainian translations (andrii-bodnar)
This PR was merged into the 4.4 branch.

Discussion
----------

[Security] Added Ukrainian translations

| Q             | A
| ------------- | ---
| Branch?       | 4.4 <!-- see below -->
| Bug fix?      | no
| New feature?  | no <!-- please update src/**/CHANGELOG.md files -->
| Deprecations? | no <!-- please update UPGRADE-*.md and src/**/CHANGELOG.md files -->
| Tickets       | Fix #41088 <!-- prefix each issue number with "Fix #", no need to create an issue if none exist, explain below instead -->
| License       | MIT
| Doc PR        | <!-- required for new features -->

Added some missing Ukrainian translations.

Commits
-------

8f34572a65 [Security] Added Ukrainian translations
2021-05-15 08:45:00 +02:00
Nyholm
4289ab9f77
minor #41231 [Security] Added and improved Bulgarian translations (I-Valchev)
This PR was merged into the 4.4 branch.

Discussion
----------

[Security] Added and improved Bulgarian translations

| Q             | A
| ------------- | ---
| Branch?       | 4.4
| Bug fix?      | no
| New feature?  | no
| Deprecations? |no
| Tickets       | Fix #41035
| License       | MIT
| Doc PR        | n/a

Added missing translations for id 19 and 20.
Replaced the word "incorrect" with "unsuccessful"/"failed" for id 17.
Replaced the phonetic use of "cookie" with the word for "cookie" in Bulgarian for id 5 and 10.
Fixed grammatical error, now use the definite article ("the") instead of the indefinine for id 11, 13, 15 and 16.

Commits
-------

b79962b676 Added and improved Bulgarian translations
2021-05-15 08:41:48 +02:00
Alexander M. Turek
88520e53b2 Don't call class_exists() on null 2021-05-15 01:35:14 +02:00
Alexander M. Turek
be28e226f5 Merge branch '4.4' into 5.2
* 4.4:
  Introduce SYMFONY_FEATURE_BRANCH variable in Travis config
2021-05-15 00:55:27 +02:00