Symfony blog posts for September 2014
New in Symfony 2.6: AJAX requests in the web debug toolbar
In Symfony 2.6, the web debug toolbar will include a new panel called AJAX to boost your productivity while debugging applications. This panel shows in real-time the number of AJAX requests performed in the page being displayed.
September 30, 2014 · Published in #Living on the edgeGetting ready for SymfonyLive Berlin 2014
SymfonyLive Berlin 2014 is coming fast!
September 29, 2014 · Published in #Community #ConferencesNew in Symfony 2.6: Simpler Security Voters
Symfony 2.6 will allow to define much simpler security voters thanks to the new AbstractVoter class.
September 29, 2014 · Published in #Living on the edgeA week of symfony #404 (22->28 September 2014)
This week finished the development phase for the upcoming Symfony 2.6 version. Development activity was frantic to include all the great features that will be polished during the two month stabilization phase. Meanwhile, the Symfony Live London 2014 conference took place with great success. Next conference: Symfony Live New York 2014
September 28, 2014 · Published in #A week of symfonyNew in Symfony 2.6: Date support for Validator constraints
Comparing dates is one of the most frequently requested functionalities for the Symfony Validator component. That's why Symfony 2.6 will include date support for comparison and range constraints.
September 26, 2014 · Published in #Living on the edgeNew in Symfony 2.6: New shortcut methods for controllers
Symfony 2.6 will add five new helpers to the base controller class: redirectToRoute(), addFlash(), isGranted(), denyAccessUnlessGranted() and isCsrfTokenValid().
September 25, 2014 · Published in #Living on the edgeNew in Symfony 2.6: LockHandler
Symfony 2.6 will introduce a new LockHandler that provides a simple abstraction to lock anything by means of a file lock. It's most common use case is to avoid race conditions by locking commands, so the same command cannot be executed concurrently by different processes.
September 24, 2014 · Published in #Living on the edgeNew in Symfony 2.6: Smarter assets:install command
Starting from Symfony 2.6, the behavior of the assets:install command will be smarter. Now, when your system doesn't support symbolic links or if there is any other problem, the command will silently fall back to make a hard copy of the assets and it will inform you about this.
September 23, 2014 · Published in #Living on the edgeSymfony 2.6 fast approaching its stabilization phase
We are a few days from the end of Symfony 2.6 development phase. Therefore, this is our last chance to finish all the pending pull requests in time for Symfony 2.6.
September 22, 2014 · Published in #Living on the edge #SymfonyA week of symfony #403 (15->21 September 2014)
This week, the development activity of Symfony increased significantly because we are approaching the end of the development phase for 2.6 version, which is scheduled for the end of this month. As part of the DX initiative, Symfony added four new shortcuts for controllers and simplified a bit the configuration of Twig form themes.
September 21, 2014 · Published in #A week of symfonyThelia, a Symfony-based e-commerce solution
An interview with Manuel Raynaud, lead developer of Thelia, a Symfony-based e-commerce solution. Introducing the new Thelia 2 and how it's in perfect harmony with Symfony.
September 17, 2014 · Published in #Case studiesA week of symfony #402 (08->14 September 2014)
This week, Symfony project focused on the Intl component, adding some features and proposing a few changes to make it easier to use. Meanwhile, the discussions about the new Symfony installer continued and more changes for Symfony 3.0 were proposed.
September 14, 2014 · Published in #A week of symfonyThe full agenda for SymfonyLive New York is now online!
Discover the speaker line-up for SymfonyLive New York, don't miss this great event!
September 9, 2014 · Published in #Community #ConferencesA week of symfony #401 (01->07 September 2014)
This week Symfony released 2.3.19, 2.4.9 and 2.5.4 maintenance version to address several potential security vulnerabilities. In addition, the import/export feature of the web profiler was replaced by a CLI tool.
September 7, 2014 · Published in #A week of symfonyFOSUserBundle: Entropy of generated tokens is lost
FOSUserBundle: Entropy of generated tokens is lost.
September 5, 2014 · Published in #CommunityCVE-2014-6061: Security issue when parsing the Authorization header
CVE-2014-6061 is about a potential security issue when parsing the Authorization header.
September 3, 2014 · Published in #Security AdvisoriesCVE-2014-6072: CSRF vulnerability in the Web Profiler
CVE-2014-6072 is about fixing a CSRF vulnerability in the Web Profiler.
September 3, 2014 · Published in #Security AdvisoriesCVE-2014-5245: Direct access of ESI URLs behind a trusted proxy
CVE-2014-5245 is about being able to access ESI URLs even behind a trusted proxy.
September 3, 2014 · Published in #Security AdvisoriesCVE-2014-5244: Denial of service with a malicious HTTP Host header
CVE-2014-5244 is about a potential denial of service with a malicious HTTP Host header.
September 3, 2014 · Published in #Security Advisories