symfony-boilerplate

symfony-boilerplate copied to clipboard

Regex mode allowed undesired domains to perform cross-origin requests, by simply satisfying the regex corresponding to the authorized origin. For instance, if the authorized origin (i.e. the web app) was...

dsavina

https://symfony.com/doc/current/reference/constraints/Valid.html

gulien

^ organize by application layer

gulien

^

gulien

GraphQLite seems to have an issue when you uses `$user` as argument: ```php /** * @Query * @Logged * @Security("is_granted('GET_USER', user)") */ public function user(User $user): User { // ......

gulien

Local PHP security checker

1

https://github.com/fabpot/local-php-security-checker

gulien

^

gulien

Add a documentation on xDebug. Update the stack to make xDebug works with Vagrant.

gulien

Some files from private storage may be serve "inline" (images etc.). Add cache.

gulien

^

gulien