This repository has been archived on 2023-08-20. You can view files and clone it, but cannot push or open issues or pull requests.

Fabien Potencier 7e5ec59fc8 minor #11845 [HttpKernel] Escape ESI url in generated response (Jérémy Derussé) ... This PR was merged into the 2.3 branch. Discussion ---------- [HttpKernel] Escape ESI url in generated response | Q | A | ------------- | --- | Bug fix? | yes | New feature? | no | BC breaks? | no | Deprecations? | no | Tests pass? | yes | Fixed tickets | | License | MIT | Doc PR | NA If a template with an `<esi>` tag is configured with an URL containing a `'` (in `src` or `alt`) ; the HttpCache will generate invalide php code. It's not a security issue, given the template and the `<esi>` tag is written by the developper, but, as the character quote is allowed in URL (https://tools.ietf.org/html/rfc3986) it coud be a potential bug. Commits ------- b044c45 Escape parameter on generated response		2014-09-05 09:35:40 +02:00
..
Bridge	bug #11160 [DoctrineBridge] Abstract Doctrine Subscribers with tags (merk)	2014-08-28 21:58:08 +02:00
Bundle	security #11832 n/a (fabpot)	2014-09-03 09:40:30 +02:00
Component	minor #11845 [HttpKernel] Escape ESI url in generated response (Jérémy Derussé)	2014-09-05 09:35:40 +02:00