Restore deprecated XSS default configuration values

nelmio / NelmioSecurityBundle

Adds extra security-related features in your Symfony application

https://symfony.com/bundles/NelmioSecurityBundle/

MIT License

651 stars 85 forks source link

Restore deprecated XSS default configuration values #354

Closed martijnc closed 2 months ago

martijnc commented 2 months ago

The removal of the default configuration values during the deprecation of this feature is not backward-compatible and breaks container building for application that do not explicitly set report_uri.

Since the feature is expected to continue to work during the deprecation period I think it is safest to restore the defaults.

Seldaek commented 2 months ago

Thanks, glad you caught it before release 👍🏻