Skip to content

Releases: nelmio/NelmioSecurityBundle

v2.10.2

17 Feb 14:46
302b0f5
Compare
Choose a tag to compare
  • Fixed dependencies (allow installing on PHP 8 and explicitly require symfony/yaml)

v2.10.1

17 Feb 14:45
v2.10.1
80d6e10
Compare
Choose a tag to compare
  • Fix ContentSecurityPolicyController

v2.10.0

18 Jun 11:47
v2.10.0
551a81e
Compare
Choose a tag to compare
  • Ensure compatibility with Symfony EventDispatcher 5.x

v2.9.1

11 May 08:13
v2.9.1
89ac385
Compare
Choose a tag to compare
  • Ensure passing the correct type to UAParser::parse
  • Use Symfony DI Reference instead of Definition
  • Optimize regular expressions in the sha computer
  • Show non-deprecated usage of the csp_nonce Twig function

v2.9.0

02 Mar 14:32
v2.9.0
d8542de
Compare
Choose a tag to compare
  • Symfony 5 compatibility added
  • Bump minimal Twig version to 1.38.0

v2.8.0

02 Mar 11:19
v2.8.0
c4d55c4
Compare
Choose a tag to compare
  • Fixed deprecated/invalid method usage on logger interface
  • Drop tests for PHP 5.4

2.7.0

03 Apr 13:45
2.7.0
ce63c12
Compare
Choose a tag to compare
  • Use base64 for encoding nonces
  • Support more CSP level 3 keywords
  • Allow configuring a report URI for XSS

2.6.0

03 Apr 09:57
2.6.0
4d1cc82
Compare
Choose a tag to compare
  • Support random_compat v9.99.99
  • Don't ship unneeded files for composer installs
  • Change controller action reference
  • Add worker-src directive
  • Fix deprecation for symfony/config 4.2+

2.5.1

21 Mar 14:34
2.5.1
fe1d31e
Compare
Choose a tag to compare
  • Abort CSP compiler pass when CSP is not enabled

2.5.0

21 Mar 14:31
2.5.0
e895e05
Compare
Choose a tag to compare
  • Allows matching the query parameter for clickjacking protection
  • Cleanup content type restrictable listener
  • Added Symfony 4 support
  • Added support for 'worker-src' CSP directive
  • Removed PHP 5.3 support guarantees
    F- ix CSP noise filter compiler pass registration