Symfony Blog

CVE-2014-5244 is about a potential denial of service with a malicious HTTP Host header.

This week, "A Week of Symfony" achieves an incredible milestone: its 400th issue! That means that we've been publishing a weekly digest for almost eight years, without missing a single week.

Symfony 2.6 will include a new security:check command, which looks for known security vulnerabilities in your project's dependencies.

This week, Symfony organized its second DX Hackday. This time developers focused not only on the Symfony core but also on the 30 mot useful bundles. Meanwhile, a new simpler option validation was proposed for the OptionsResolver component.

One of the best things about Open Source is the community of users around it. Here at the Symfony project, we are proud to have an extensive user community comprised of so many special people. In this article, we would like to introduce a very special member and his incredible adventure.

This week, Symfony added a useful isCsrfTokenValid() method to the base controller class and moved debug commands to debug namespace to be more consistent. And next week the second DX Hackday will bring in many more tweaks and features to make your work as developer far easier. Lastly, the workshops for the upcoming Symfony conferences were announced.

The workshop schedules at SymfonyLive New York and SymfonyCon Madrid are published. Early bird registration is open until August 29th, register before it's too late!

This week Symfony project decided to extend the maintenance of Symfony 2.4 for two additional months and released the 2.5.3 maintenance version. In addition, the list of the 30 most useful Symfony Bundles was published and the second DX Hack Day was announced.

We've having a hack day on Aug 23rd, we're expanding the DX initiative to include the 30 most useful bundles and we need your help to make Symfony 2.6 incredible!

Here are the results of the Symfony Community Bundles Survey and our plans to make them better.