Releases · symfony/http-foundation

security symfony/symfony#cve-2024-50345 [HttpFoundation] Reject URIs that contain invalid characters (@nicolas-grekas)
bug symfony/symfony#58712 [HttpFoundation] Fix support for \SplTempFileObject in BinaryFileResponse (@elementaire)

nicolas-grekas and elementaire

Assets 2

06 Nov 10:00

fabpot

v7.1.7

Changelog (v7.1.6...v7.1.7)

security symfony/symfony#cve-2024-50345 [HttpFoundation] Reject URIs that contain invalid characters (@nicolas-grekas)
bug symfony/symfony#58712 [HttpFoundation] Fix support for \SplTempFileObject in BinaryFileResponse (@elementaire)

nicolas-grekas and elementaire

Assets 2

06 Nov 09:54

fabpot

v6.4.14

Changelog (v6.4.13...v6.4.14)

security symfony/symfony#cve-2024-50345 [HttpFoundation] Reject URIs that contain invalid characters (@nicolas-grekas)

nicolas-grekas

Assets 2

06 Nov 09:37

fabpot

v5.4.46

Changelog (v5.4.45...v5.4.46)

security symfony/symfony#cve-2024-50345 [HttpFoundation] Reject URIs that contain invalid characters (@nicolas-grekas)

nicolas-grekas

Assets 2

27 Oct 16:12

fabpot

v7.2.0-BETA1 Pre-release

Pre-release

Changelog (v7.1.6...v7.2.0-BETA1)

feature symfony/symfony#57805 [FrameworkBundle] Deprecate session.sid_length and session.sid_bits_per_character config options (@alexandre-daubois)
feature symfony/symfony#58244 [HttpFoundation] Deprecate more options in NativeSessionStorage (@alexandre-daubois)
feature symfony/symfony#58154 [HttpFoundation] Add PRIVATE_SUBNETS as a shortcut for private IP address ranges to Request::setTrustedProxies() (@nicolas-grekas)
feature symfony/symfony#58038 [HttpFoundation] Add optional $v4Bytes and $v6Bytes parameters to IpUtils::anonymize() (@alexandre-daubois)
feature symfony/symfony#57909 [HttpFoundation] Add $requests parameter to RequestStack constructor (@alexander-schranz)