Commit Graph

38021 Commits

Author SHA1 Message Date
Fabien Potencier 789dc7eb57
Merge pull request #28101 from fabpot/release-2.8.44
released v2.8.44
2018-08-01 16:12:49 +02:00
Fabien Potencier 4abd3a8eb0 updated VERSION for 2.8.44 2018-08-01 16:12:31 +02:00
Fabien Potencier 282e062226 update CONTRIBUTORS for 2.8.44 2018-08-01 16:12:26 +02:00
Fabien Potencier 15835bc7df updated CHANGELOG for 2.8.44 2018-08-01 16:12:10 +02:00
Nicolas Grekas 67044af83d Merge branch '4.1'
* 4.1:
  [HttpKernel] fix trusted headers management in HttpCache and InlineFragmentRenderer
2018-08-01 16:08:05 +02:00
Nicolas Grekas 96504fb8c9 Merge branch '4.0' into 4.1
* 4.0:
  [HttpKernel] fix trusted headers management in HttpCache and InlineFragmentRenderer
2018-08-01 16:07:44 +02:00
Nicolas Grekas 974240e178 Merge branch '3.4' into 4.0
* 3.4:
  [HttpKernel] fix trusted headers management in HttpCache and InlineFragmentRenderer
2018-08-01 16:06:38 +02:00
Nicolas Grekas bcf5897bb1 Merge branch '2.8' into 3.4
* 2.8:
  [HttpKernel] fix trusted headers management in HttpCache and InlineFragmentRenderer
2018-08-01 16:04:26 +02:00
Nicolas Grekas 0f7667d643 security #cve-2018-14774 [HttpKernel] fix trusted headers management in HttpCache and InlineFragmentRenderer (nicolas-grekas)
* commit '725dee4cd8':
  [HttpKernel] fix trusted headers management in HttpCache and InlineFragmentRenderer
2018-08-01 15:48:20 +02:00
Nicolas Grekas 725dee4cd8 [HttpKernel] fix trusted headers management in HttpCache and InlineFragmentRenderer 2018-08-01 15:47:49 +02:00
Michael Moravec cb91cdef91 Remove direct dependencies on doctrine/common 2018-08-01 14:08:31 +02:00
Nicolas Grekas c67f2aa291 Merge branch '4.1'
* 4.1:
  [HttpFoundation] Remove support for legacy and risky HTTP headers
2018-08-01 10:41:47 +02:00
Nicolas Grekas bde8a7fca4 Merge branch '4.0' into 4.1
* 4.0:
  [HttpFoundation] Remove support for legacy and risky HTTP headers
2018-08-01 10:41:27 +02:00
Nicolas Grekas 45d6729ddc Merge branch '3.4' into 4.0
* 3.4:
  [HttpFoundation] Remove support for legacy and risky HTTP headers
2018-08-01 10:38:58 +02:00
Nicolas Grekas 768abbfe64 Merge branch '2.8' into 3.4
* 2.8:
  [HttpFoundation] Remove support for legacy and risky HTTP headers
2018-08-01 10:38:11 +02:00
Nicolas Grekas 6604978f83 security #cve-2018-14773 [HttpFoundation] Remove support for legacy and risky HTTP headers (nicolas-grekas)
This PR was merged into the 2.8 branch.

Discussion
----------

[HttpFoundation] Remove support for legacy and risky HTTP headers

| Q             | A
| ------------- | ---
| Branch?       | 2.8
| Bug fix?      | yes
| New feature?  | no
| BC breaks?    | no
| Deprecations? | no
| Tests pass?   | yes
| Fixed tickets | -
| License       | MIT
| Doc PR        | -

Commits
-------

e447e8b921 [HttpFoundation] Remove support for legacy and risky HTTP headers
2018-08-01 10:34:59 +02:00
Nicolas Grekas 1f629c8789 Merge branch '4.1'
* 4.1:
  [HttpKernel] Fixed invalid REMOTE_ADDR in inline subrequest when configuring trusted proxy with subnet
  [FrameworkBundle] fixed guard event names for transitions
  [DI] Improve class named servics error message
  remove unnecessary instanceof in MongoDbSessionHandler
  [HttpFoundation] fixed using _method parameter with invalid type
  Renaming internal test class to help auto-completion
  [Intl] Replace svn with git in the icu data update script
  [Messenger] Fix error message on undefined message class for non-subscriber handler
  [HttpFoundation] Fix Cookie::isCleared
2018-08-01 10:24:20 +02:00
Nicolas Grekas 1d3f835e05 Merge branch '4.0' into 4.1
* 4.0:
  [HttpKernel] Fixed invalid REMOTE_ADDR in inline subrequest when configuring trusted proxy with subnet
  [FrameworkBundle] fixed guard event names for transitions
  [DI] Improve class named servics error message
  [HttpFoundation] fixed using _method parameter with invalid type
  [Intl] Replace svn with git in the icu data update script
  [HttpFoundation] Fix Cookie::isCleared
2018-08-01 10:24:03 +02:00
Nicolas Grekas e0ce427aef Merge branch '3.4' into 4.0
* 3.4:
  [HttpKernel] Fixed invalid REMOTE_ADDR in inline subrequest when configuring trusted proxy with subnet
  [FrameworkBundle] fixed guard event names for transitions
  [DI] Improve class named servics error message
  [HttpFoundation] fixed using _method parameter with invalid type
  [Intl] Replace svn with git in the icu data update script
  [HttpFoundation] Fix Cookie::isCleared
2018-08-01 10:23:45 +02:00
Nicolas Grekas f6bfe2ef83 minor #28095 link helper does not link Contracts (oleg-andreyev)
This PR was merged into the 4.2-dev branch.

Discussion
----------

link helper does not link Contracts

| Q             | A
| ------------- | ---
| Branch?       | master
| Bug fix?      | yes
| New feature?  | no
| BC breaks?    | no
| Deprecations? | no
| Tests pass?   | yes
| Fixed tickets | -
| License       | MIT

`link` is great tool in development and while working on another PR, noticed that all `symfony/*` packages are linked except `symfony/contracts`

After this PR this issue will be fixed.

Commits
-------

7c124c4907 appending root of Contracts dir (where composer.json is located)
2018-08-01 10:19:19 +02:00
Nicolas Grekas e447e8b921 [HttpFoundation] Remove support for legacy and risky HTTP headers 2018-07-31 23:38:46 +02:00
Oleg Andreyev 7c124c4907 appending root of Contracts dir (where composer.json is located) 2018-07-31 21:19:26 +03:00
Nicolas Grekas 7e3603dc38 Merge branch '2.8' into 3.4
* 2.8:
  [HttpKernel] Fixed invalid REMOTE_ADDR in inline subrequest when configuring trusted proxy with subnet
  [HttpFoundation] fixed using _method parameter with invalid type
  [Intl] Replace svn with git in the icu data update script
  [HttpFoundation] Fix Cookie::isCleared
2018-07-31 11:47:14 +02:00
Nicolas Grekas 9d0ff4f22a bug #28003 [HttpKernel] Fixes invalid REMOTE_ADDR in inline subrequest when configuring trusted proxy with subnet (netiul)
This PR was merged into the 2.8 branch.

Discussion
----------

[HttpKernel] Fixes invalid REMOTE_ADDR in inline subrequest when configuring trusted proxy with subnet

| Q             | A
| ------------- | ---
| Branch?       | 2.8
| Bug fix?      | yes
| New feature?  | no
| BC breaks?    | no
| Deprecations? | no
| Tests pass?   | yes
| Fixed tickets | #28000    <!-- #-prefixed issue number(s), if any -->
| License       | MIT
| Doc PR        | n/a

When trusted proxies are configured including a subnet a subrequest initiated by the InlineFragmentRenderer would contain an invalid REMOTE_ADDR server variable.

Commits
-------

f657dd2444 [HttpKernel] Fixed invalid REMOTE_ADDR in inline subrequest when configuring trusted proxy with subnet
2018-07-31 11:44:51 +02:00
Zacharias Luiten f657dd2444 [HttpKernel] Fixed invalid REMOTE_ADDR in inline subrequest when configuring trusted proxy with subnet 2018-07-31 11:18:51 +02:00
Nicolas Grekas 4081bc6a50 bug #28007 [FrameworkBundle] fixed guard event names for transitions (destillat)
This PR was submitted for the 3.3 branch but it was merged into the 3.4 branch instead (closes #28007).

Discussion
----------

[FrameworkBundle] fixed guard event names for transitions

| Q             | A
| ------------- | ---
| Branch?       | 3.3|4
| Bug fix?      | yes
| New feature?  |no
| BC breaks?    | no
| Deprecations? | no
| Tests pass?   | yes
| Fixed tickets |
| License       | MIT
| Doc PR        |

Framework yaml configuration support workflow transitions as both indexed and associative array e.g
```yaml
transitions:
    -    name: test
         from: open
         to: test
    -
```
```yaml
transitions:
    test:
         from: open
         to: test
```
Then it's used in foreach loop to register guard event listeners 4b92b96796/src/Symfony/Bundle/FrameworkBundle/DependencyInjection/FrameworkExtension.php (L609)
Array keys are used as transition names but it's wrong for indexed array so we get event names like these
workflow.workflow_name.guard.transition_index instead of workflow.workflow_name.guard.tranision_name

Commits
-------

9bbb1e5cff [FrameworkBundle] fixed guard event names for transitions
2018-07-29 17:24:27 +02:00
Ivan Nikolaev 9bbb1e5cff [FrameworkBundle] fixed guard event names for transitions 2018-07-29 17:24:21 +02:00
Nicolas Grekas f4951682bf minor #28057 [DI] Improve class named servics error message (ro0NL)
This PR was squashed before being merged into the 3.4 branch (closes #28057).

Discussion
----------

[DI] Improve class named servics error message

| Q             | A
| ------------- | ---
| Branch?       | 3.4
| Bug fix?      | no
| New feature?  | no
| BC breaks?    | no     <!-- see https://symfony.com/bc -->
| Deprecations? | no
| Tests pass?   | yes    <!-- please add some, will be required by reviewers -->
| Fixed tickets | #28006
| License       | MIT
| Doc PR        | symfony/symfony-docs#... <!-- required for new features -->

Commits
-------

61de0601a1 [DI] Improve class named servics error message
2018-07-29 17:19:31 +02:00
Roland Franssen 61de0601a1 [DI] Improve class named servics error message 2018-07-29 17:19:21 +02:00
Nicolas Grekas 81eb54eb78 bug #28045 [HttpFoundation] Fix Cookie::isCleared (ro0NL)
This PR was merged into the 2.8 branch.

Discussion
----------

[HttpFoundation] Fix Cookie::isCleared

| Q             | A
| ------------- | ---
| Branch?       | 2.8
| Bug fix?      | yes
| New feature?  | no
| BC breaks?    | no     <!-- see https://symfony.com/bc -->
| Deprecations? | no
| Tests pass?   | yes    <!-- please add some, will be required by reviewers -->
| Fixed tickets | #27946
| License       | MIT
| Doc PR        | symfony/symfony-docs#... <!-- required for new features -->

<!--
Write a short README entry for your feature/bugfix here (replace this comment block.)
This will help people understand your PR and can be used as a start of the Doc PR.
Additionally:
 - Bug fixes must be submitted against the lowest branch where they apply
   (lowest branches are regularly merged to upper ones so they get the fixes too).
 - Features and deprecations must be submitted against the master branch.
-->

Commits
-------

d3d7766874 [HttpFoundation] Fix Cookie::isCleared
2018-07-29 17:16:40 +02:00
Nicolas Grekas 329d3f7cd7 minor #28066 [HttpFoundation] Remove unnecessary condition in MongoDbSessionHandler (raplider)
This PR was submitted for the 4.0 branch but it was merged into the 4.1 branch instead (closes #28066).

Discussion
----------

[HttpFoundation] Remove unnecessary condition in MongoDbSessionHandler

| Q             | A
| ------------- | ---
| Branch?       | 4.0
| Bug fix?      | yes
| New feature?  | no
| BC breaks?    | no
| Deprecations? | no
| Tests pass?   | yes
| Fixed tickets | n/a
| License       | MIT
| Doc PR        | n/a

<!--
Write a short README entry for your feature/bugfix here (replace this comment block.)
This will help people understand your PR and can be used as a start of the Doc PR.
Additionally:
 - Bug fixes must be submitted against the lowest branch where they apply
   (lowest branches are regularly merged to upper ones so they get the fixes too).
 - Features and deprecations must be submitted against the master branch.
-->

Commits
-------

3f013a473a remove unnecessary instanceof in MongoDbSessionHandler
2018-07-29 17:15:13 +02:00
raplider 3f013a473a remove unnecessary instanceof in MongoDbSessionHandler 2018-07-29 17:15:07 +02:00
Nicolas Grekas 8e5bc07a51 minor #28067 [Intl] Replace svn with git in the icu data update script (jakzal)
This PR was merged into the 2.8 branch.

Discussion
----------

[Intl] Replace svn with git in the icu data update script

| Q             | A
| ------------- | ---
| Branch?       | 2.8
| Bug fix?      | no
| New feature?  | no
| BC breaks?    | no
| Deprecations? | no
| Tests pass?   | yes
| Fixed tickets | -
| License       | MIT
| Doc PR        | -

Quoting http://site.icu-project.org/repository:

> Announcement 07/16/2018: The ICU source code repository has been migrated from Subversion to Git, and is now hosted on GitHub at the following location: https://github.com/unicode-org/icu.

The icu update script will from now on:
* use git
* fetch the latest release tag (no need to maintain the list anymore)

I rebuilt the data files, but since no new ICU releases has been made, none of files were actually updated.

Commits
-------

ebdf972e49 [Intl] Replace svn with git in the icu data update script
2018-07-29 17:14:19 +02:00
Nicolas Grekas 86dd8dbfdd bug #28080 [HttpFoundation] fixed using _method parameter with invalid type (Phobetor)
This PR was squashed before being merged into the 2.8 branch (closes #28080).

Discussion
----------

[HttpFoundation] fixed using _method parameter with invalid type

| Q             | A
| ------------- | ---
| Branch?       | 2.8
| Bug fix?      | yes
| New feature?  | no
| BC breaks?    | no
| Deprecations? | no
| Tests pass?   | yes
| Fixed tickets | #28079
| License       | MIT
| Doc PR        | -

This change makes sure that an incoming `_method` parameter is only used when it is a string value.

Commits
-------

63583debd2 [HttpFoundation] fixed using _method parameter with invalid type
2018-07-29 17:13:15 +02:00
Phobetor 63583debd2 [HttpFoundation] fixed using _method parameter with invalid type 2018-07-29 17:13:09 +02:00
Nicolas Grekas a804b915f7 minor #28082 Renaming internal test class to help auto-completion (weaverryan)
This PR was merged into the 4.1 branch.

Discussion
----------

Renaming internal test class to help auto-completion

| Q             | A
| ------------- | ---
| Branch?       | 4.1
| Bug fix?      | yes-ish
| New feature?  | no
| BC breaks?    | no
| Deprecations? | no->
| Tests pass?   | yes
| Fixed tickets | none
| License       | MIT
| Doc PR        | not needed

This fixes auto-completion issues in IDE's: when you start typing `AbstractContro...` it gives you two choices. Let's avoid calling test classes the same name as real classes when possible :).

Commits
-------

b5ffb305a7 Renaming internal test class to help auto-completion
2018-07-29 17:08:24 +02:00
Nicolas Grekas e843bb86c8 [DI] Fix false-positive circular ref leading to wrong exceptions or infinite loops at runtime 2018-07-29 16:51:25 +02:00
Javier Eguiluz ac0cd15402 Remove the Expires header when calling Response::expire() 2018-07-27 17:20:18 +02:00
Ryan Weaver b5ffb305a7 Renaming internal test class to help auto-completion 2018-07-27 10:58:22 -04:00
Samuel ROZE afb17aba09 bug #28059 [Messenger] Fix error message on undefined message class for non-subscriber handler (chalasr)
This PR was merged into the 4.1 branch.

Discussion
----------

[Messenger] Fix error message on undefined message class for non-subscriber handler

| Q             | A
| ------------- | ---
| Branch?       | 4.1
| Bug fix?      | yes
| New feature?  | no
| BC breaks?    | no
| Deprecations? | no
| Tests pass?   | yes
| Fixed tickets | n/a
| License       | MIT
| Doc PR        | n/a

Fixes a wrong hint talking about `getHandledMessages()` while the handler does not implement `MessageSubscriberInterface`.

Commits
-------

e5ea3bc032 [Messenger] Fix error message on undefined message class for non-subscriber handler
2018-07-26 22:05:42 +01:00
Jakub Zalas ebdf972e49
[Intl] Replace svn with git in the icu data update script 2018-07-26 17:13:28 +01:00
Nicolas Grekas a31f4aa2e9 Merge branch '4.1'
* 4.1:
  Fix tests for legacy phpunit versions
2018-07-26 14:12:52 +02:00
Nicolas Grekas 0e07ee1a4b Merge branch '4.0' into 4.1
* 4.0:
  Fix tests for legacy phpunit versions
2018-07-26 14:00:37 +02:00
Nicolas Grekas 4fadd36072 Merge branch '3.4' into 4.0
* 3.4:
  Fix tests for legacy phpunit versions
2018-07-26 13:59:25 +02:00
Nicolas Grekas d0eef33763 Fix tests for legacy phpunit versions 2018-07-26 13:58:24 +02:00
Nicolas Grekas 510977dd19 Merge branch '4.1'
* 4.1:
  Enable native_constant_invocation CS fixer
2018-07-26 13:25:51 +02:00
Nicolas Grekas c4d10c4d4d Merge branch '4.0' into 4.1
* 4.0:
  Enable native_constant_invocation CS fixer
2018-07-26 13:24:31 +02:00
Nicolas Grekas b5143233d2 Merge branch '3.4' into 4.0
* 3.4:
  Enable native_constant_invocation CS fixer
2018-07-26 13:22:46 +02:00
Nicolas Grekas f569f58b66 Merge branch '2.8' into 3.4
* 2.8:
  Enable native_constant_invocation CS fixer
2018-07-26 13:19:56 +02:00
Nicolas Grekas 2ba0fa4a14 Enable native_constant_invocation CS fixer 2018-07-26 13:13:39 +02:00