Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove non needed global parameters #49

Merged
merged 2 commits into from Oct 4, 2018
Merged

Remove non needed global parameters #49

merged 2 commits into from Oct 4, 2018

Conversation

rgomezcasas
Copy link
Member

No description provided.

@rgomezcasas rgomezcasas merged commit 0e90bdd into master Oct 4, 2018
@rgomezcasas rgomezcasas deleted the remove-global branch October 4, 2018 22:44
Copy link
Member

@JavierCane JavierCane left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

1 critical comment to review regarding the secret parameter. Take a look when you have time please @rgomezcasas 🙌

Thanks!

- { resource: ../../../../global/config/config.yml }


# - { resource: parameters.yml }
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Could we delete this import?

- { resource: logs.yml }
- { resource: symfony.yml }


framework:
secret: '%secret%'
secret: 'secret'
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why have you removed the parameter % keyword?

This way we would be setting the hardcoded secret string as the application string. That could be considered as a security bad practice because it isn't too much complex, and we would be exposing it in our public repo, doesn't we?

Furthermore, this is what make us do not pass the SymfonyInsight validation

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants