Skip to content

Release v3.12.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 28 Oct 16:33
· 25 commits to main since this release
v3.12.0
e5f247c

v3.12.0

Changelog

Security: allow_unauthenticated is refused in production (prod or non-debug kernels). See UPGRADING.

Security

  • allow_unauthenticated refused in production. The switch opens the performance dashboard to anonymous users; the
    container now refuses to compile with it in the prod environment or in any non-debug kernel outside test*
    environments (as ContactFormBundle). The demo keeps it in dev and requires ROLE_ADMIN in its production mode
    (when@prod).

Commits

  • Release v3.12.0: Security: allow_unauthenticated is refused in production (prod or non-debug kernels). (e5f247c)
  • fix(security): refuse allow_unauthenticated in production (bef313c)
  • chore(deps): refresh composer locks (bundle + demos) (57a055e)
Assets 2
Loading