search

davidyell / Learning-Symfony2

Learning Symfony2 by recreating a Stack Exchange website
MIT License
3 stars 0 forks source link

[Insight] Sensitive data should not be present in non-parameter configuration files #8

Closed davidyell closed 10 years ago

davidyell commented 10 years ago

in app/config/security.yml, line 13

A sensitive data has been detected in your configuration file (password parameter). You should consider storing it in a single parameter file.


    providers:
        in_memory:
            memory:
                users:
                    user:  { password: userpass, roles: [ 'ROLE_USER' ] }
                    admin: { password: adminpass, roles: [ 'ROLE_ADMIN' ] }

    firewalls:
        dev:
            pattern:  ^/(_(profiler|wdt)|css|images|js)/

Posted from SensioLabsInsight