Skip to content

v3.0.2

Choose a tag to compare

View all tags
@njoubert-cleverage njoubert-cleverage released this 02 Oct 13:42
· 189 commits to main since this release
v3.0.2
70992b3
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Fixes

  • GHSA-r3m7-69c2-2vmp ProcessScheduleCrudController: require ROLE_USER, so that the scheduler
    pages require an authenticated user again (since EasyAdmin 5, the #[IsGranted] of the dashboard does not apply to the CRUD routes);
    ProcessExecuteController: same attribute, as defense in depth. Add a test checking that every controller is protected.
Assets 2
Loading