This repository has been archived on 2023-08-20. You can view files and clone it, but cannot push or open issues or pull requests.
Go to file
Fabien Potencier 88e2d70df0 feature #16076 [HttpFoundation] change precedence of parameters in Request::get (Tobion)
This PR was merged into the 3.0-dev branch.

Discussion
----------

[HttpFoundation] change precedence of parameters in Request::get

| Q             | A
| ------------- | ---
| Bug fix?      | no
| New feature?  | no
| BC breaks?    | yes
| Deprecations? | no
| Tests pass?   | yes
| Fixed tickets | -
| License       | MIT
| Doc PR        | -

Allowing the request attributes to be overwritten via GET parameters is risky and made #8966 even worse.
It is even more risky because it skips the requirements checks as configured in routing. So people that set requirements for routing placeholders like `\d+` or `html|json` can be sure it is validated when using the routing variables. But if developers use `$request->get()` to retrieve them, anybody from outside can set any value for those.

Commits
-------

e8d6764 [HttpFoundation] change precedence of parameters in Request::get
2015-10-05 09:30:19 +02:00
src/Symfony feature #16076 [HttpFoundation] change precedence of parameters in Request::get (Tobion) 2015-10-05 09:30:19 +02:00
.editorconfig Add EditorConfig File 2012-06-16 14:08:15 +02:00
.gitignore Add appveyor.yml for C.I. on Windows 2015-08-25 23:41:37 +02:00
.php_cs CS: general fixes 2015-03-25 00:47:08 +01:00
.travis.php [travis] Fix dev-master version for per deps tests 2015-07-22 16:32:18 +02:00
.travis.yml Merge branch '2.8' 2015-10-01 14:14:43 +02:00
appveyor.yml Fix merge 2015-10-02 09:42:39 +02:00
composer.json Merge branch '2.8' 2015-09-29 16:08:28 +02:00
CONTRIBUTING.md fix missing links to https://symfony.com 2015-05-13 13:31:01 +02:00
CONTRIBUTORS.md update CONTRIBUTORS for 2.3.33 2015-09-25 11:08:23 +02:00
LICENSE Updated copyright to 2015 2015-01-01 13:56:52 +01:00
phpunit [appveyor] Fix command line 2015-10-02 09:16:19 +02:00
phpunit.xml.dist Merge branch '2.3' into 2.6 2015-02-24 12:52:21 +01:00
README.md Merge branch '2.8' 2015-06-04 22:30:47 +02:00
UPGRADE-3.0.md [3.0][Security] Remove deprecated features (follow up of #15899) 2015-10-01 16:40:46 +03:00

README

What is Symfony?

Symfony is a PHP full-stack web framework. It is written with speed and flexibility in mind. It allows developers to build better and easy to maintain websites with PHP.

Symfony can be used to develop all kind of websites, from your personal blog to high traffic ones like Dailymotion or Yahoo! Answers.

Installation

The best way to install Symfony is to use the official Symfony Installer. It allows you to start a new project based on the version you want.

Documentation

The "Quick Tour" tutorial gives you a first feeling of the framework. If, like us, you think that Symfony can help speed up your development and take the quality of your work to the next level, read the official Symfony documentation.

Contributing

Symfony is an open source, community-driven project. If you'd like to contribute, please read the Contributing Code part of the documentation. If you're submitting a pull request, please follow the guidelines in the Submitting a Patch section and use Pull Request Template.

Running Symfony Tests

Information on how to run the Symfony test suite can be found in the Running Symfony Tests section.