issues
search
nelmio
/
NelmioSecurityBundle
Adds extra security-related features in your Symfony application
https://symfony.com/bundles/NelmioSecurityBundle/
MIT License
649
stars
82
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
Evaluate/update`PolicyManager`
#358
martijnc
opened
1 month ago
0
Add support for the `report-to` directive
#357
martijnc
opened
1 month ago
0
[PoC] Proactive hash algorithm upgrade path
#356
martijnc
opened
1 month ago
1
Deprecate the default signed cookie algorithm
#355
martijnc
closed
1 month ago
1
Restore deprecated XSS default configuration values
#354
martijnc
closed
1 month ago
1
Fix deprecation with CSPNode yield
#353
jderusse
closed
1 month ago
1
Fix PHPStan
#352
martijnc
closed
1 month ago
1
Add `legacy_hash_algo` to support backward-compatible `hash_algo` changes
#351
martijnc
closed
1 month ago
3
Fix DI Extension class deprecation with Symfony 7.1
#350
norkunas
closed
1 month ago
1
Fix CS
#349
franmomu
closed
2 months ago
0
Introduce `DirectiveSetBuilderInterface` to allow runtime modification
#348
martijnc
opened
2 months ago
1
Add mechanism to modify directives during or after request handling
#347
martijnc
opened
2 months ago
0
Unexpecting appearance of unsafe-inline on CSP
#346
spyridonas
opened
2 months ago
4
Service dependency injection for controller action: Getting CSP nonce in controller
#345
Adambean
opened
3 months ago
7
Fix compatibility with twig 3.9 and yielding
#344
jderusse
closed
2 months ago
1
Incompatibility with twig 3.9
#343
jderusse
closed
2 months ago
1
Deprecate X-Xss-Protection
#342
maxhelias
closed
1 month ago
5
[3.2.0] The report-uri directive has been deprecated
#341
directsoftware
opened
4 months ago
2
Nonce is empty unless dump using twig
#340
vdeville
closed
5 months ago
4
CSP interferes with var-dumper
#339
pauljura
opened
5 months ago
1
fix: Added support for cookies with null value
#338
SerheyDolgushev
closed
5 months ago
0
Update index.rst
#337
Tamby6550
closed
6 months ago
0
When script-src is set to strict-dynamic, 2 nonces are listed in CSP header
#336
eliseeman
opened
6 months ago
2
Do not add signatures if `unsafe-inline` is enabled
#335
fritzmg
opened
7 months ago
0
docs: fix routing configuration path
#334
tazorax
closed
2 months ago
1
Filter `view-source` reports
#333
fritzmg
closed
7 months ago
0
Make data array variable type within `Report` more precise
#332
fritzmg
closed
1 month ago
2
Introduce `ExternalRedirectResponse`
#331
martijnc
closed
4 months ago
3
Introduce `ExternalRedirectResponse` for more fine-grained redirection control
#330
martijnc
closed
4 months ago
0
3.1.0
#329
franmomu
closed
8 months ago
1
Fix CS job
#328
franmomu
closed
9 months ago
1
Allow Symfony 7.0
#327
vtsykun
closed
8 months ago
2
Remove support of Symfony 4.4
#326
franmomu
closed
8 months ago
1
DirectiveSet::canNotBeFallbackedByDefault(): Argument #2 ($value) must be of type string, bool given
#325
bartosz-zolynski
opened
1 year ago
0
Update the default hashing algorithm used in signed cookies
#324
javiereguiluz
opened
1 year ago
0
Update the description of this GitHub repository
#323
javiereguiluz
closed
1 year ago
2
[Doc] Fix some syntax issues
#322
javiereguiluz
closed
1 year ago
0
Reusing nonce for Turbo Drive integration
#321
florimondmanca
opened
1 year ago
1
Update GA and fix build
#320
franmomu
closed
1 year ago
0
Move the docs to RST format to publish it on symfony.com
#319
javiereguiluz
closed
1 year ago
2
Remove "Server" header
#318
sdespont
closed
1 year ago
1
Issue with CSP config
#317
yellow1912
opened
1 year ago
2
Fix build
#316
franmomu
closed
1 year ago
1
Fixes for cookie signing
#315
GwendolenLynch
opened
1 year ago
7
cspscript for encore_entry_script_tags and cspstyle for encore_entry_link_tags
#314
thomas2411
opened
1 year ago
4
Incompatible with Symfony's clearCookie() strategy
#313
johnpez
opened
2 years ago
1
Problem with latest Symfony update and signed_cookie feature
#312
Flo-JB
opened
2 years ago
5
Can't use environment variables to enable/disable features
#311
janklan
closed
2 years ago
2
Extract configuration methods
#310
franmomu
closed
2 years ago
0
Use spread operator instead of array_merge
#309
franmomu
closed
2 years ago
0
Next