Cover of the book Symfony 5: The Fast Track

Symfony 5: The Fast Track is the best book to learn modern Symfony development, from zero to production. +300 pages showcasing Symfony with Docker, APIs, queues & async tasks, Webpack, SPAs, etc.

  1. Home
  2. Documentation
  3. SymfonyCloud
  4. Security

Security

master version
Maintained
master current
edit this page

Security

Protective Blocking

SymfonyCloud protective blocking feature protects web sites with known security vulnerabilities by restricting their HTTP access. We maintain a signature database of known security vulnerabilities in popular Open-Source software that have a high impact issues and have a low complexity attack scheme.

When pushing code to Git, SymfonyCloud rejects the push if a critical vulnerability is detected.

When new vulnerabilities are added to the database, all projects are scanned and application’s HTTP access is blocked on security risk detection.

For production websites, the block is partial and allows the website to stay online. Depending on the nature of the vulnerability, parts of a request, such as the query string, cookies, or any additional headers, may be removed from HTTP requests. Some HTTP requests may be blocked entirely.

For development websites, the block is full, the error message gives you detailed information about the vulnerability.

Unblocking is automated upon resolution of the vulnerability.

Tip

Even if not recommended, you can disable the protective block feature by changing the .symfony.cloud.yaml configuration as follows:

1
2
preflight:
   enabled: false

This work, including the code samples, is licensed under a Creative Commons BY-SA 3.0 license.