- What is Symfony?
- Get started
- Documentation
- Community
- Services
-
News
Latest News
What happened last week in Symfony?
This week, after the successful launch of Symfony 2.3, the development activity focused on the upcoming Symfony 2.4 version. The most important change was the introduction of simpler customization options for the Security component. In addition, Symfony 2.3.1 was released to address some minor bugs.
Upcoming EventsThe Symfony Community organizes events all over the world on a regular basis. Here are the next ones.
Switzerland, Colab Zurich Zentralstrasse 37, Zürich — #5 Symfony UserGroup ZH
on June 19, 2013, from 19:00 to 22:15
Switzerland, Zurich — Symfony CMF workshop day
on June 21, 2013, from 09:00 to 18:00
Spain, Madrid — deSymfony 2013
from June 21, 2013 to June 23, 2013
Germany, Cologne — SymfonySummit
from July 04, 2013 to July 05, 2013 - About
Archives
Master Symfony2 fundamentals
Symfony hosting done right
Discover the SensioLabs Support
New symfony security policy
by
Nicolas Perriault
– May 21, 2008
– 5 comments
Last week we've fixed a security bug allowing XSS attacks in certain circumstances. The related ticket was opened more than a year ago.
You may be wondering why it has been taking us such a long time to react. Here's the main reason: we had not a very strong security alert reporting and qualifying process. This has been fixed recently.
So as of now, if you find a security bug in symfony, please send an email to security at symfony-project.com, with as much details as you can and ideally a patch if you can provide one. Your message will be forwarded to the core team internal mailing-list, qualified and addressed as quickly as possible. The whole procedure is detailed in a dedicated section of the brand new how to contribute page in the symfony wiki.
By the way don't hesitate to read the whole how to contribute page on the wiki, as there's plenty of information on how you can help the symfony project.
NEWS FROM THE BLOG
IN THE NEWS
is a trademark of Fabien Potencier. All rights reserved.
Add a Comment
Comments
Thanks for that. Keep on your good work :)
But really, this is a good thing. Another reason symfony is #1, really.
I was deliberately playing Devil's Advocate on my blog post related to this, in an effort to get things moving. I'm please we as a community have managed to get this ball rolling in the right direction.