HtmlSanitizer UrlAttributeSanitizer Omits action/formaction/poster/cite: javascript: URI Survives Sanitization (XSS)
May 20, 2026
#Symfony
YAML Parser Stack Exhaustion via Unbounded Recursion in Nested Blocks, Sequences, and Mappings
May 20, 2026
#Symfony
YAML Parser Exponential Memory Allocation via Recursive Collection-Alias Expansion ("Billion Laughs")
May 20, 2026
#Symfony
YAML Parser ReDoS via Catastrophic Backtracking in Parser::cleanup() Regex
May 20, 2026
#Symfony
Cas2Handler Derives CAS service URL from Client Host Header → Cross-Service Ticket Replay
May 20, 2026
#Symfony
HEAD Request Bypasses methods: ['GET'] Filter in #[IsGranted] / #[IsSignatureValid] / #[IsCsrfTokenValid]
May 20, 2026
#Symfony
Unauthenticated PHP Object Deserialization in MonologBridge server:log Listener
May 20, 2026
#Symfony
SymfonyInsight added 11 new rules to help detect security issues, subtle bugs, and outdated PHP patterns early.
April 27, 2026
#Symfony
👀 1
👍 1
🚀 1
I'm thrilled to announce a brand new Symfony component: Tui, a PHP library
for building rich, interactive terminal user interfaces.
March 25, 2026
#Symfony
👀 10
❤️ 33
👍 15
🚀 18
😄 5
🎉 20
Symfony UX introduces a set of AI skills that help coding agents understand when and how to use Stimulus, Turbo, TwigComponent, and LiveComponent.
March 6, 2026
#Symfony
❤️ 11
👍 5
🚀 5
🎉 3