Skip to content
/ http-foundation Public

v7.4.18

Choose a tag to compare

View all tags
@fabpot fabpot released this 30 Aug 21:39
· 165 commits to 8.2 since this release
Immutable release. Only release title and notes can be modified.
v7.4.18
This tag was signed with the committer’s verified signature.
fabpot Fabien Potencier
SSH Key Fingerprint: 2Epes5EqLalzBuDpYoQuproz9c57CsymvlzEGYtOXJw
Verified
Learn about vigilant mode.
d070b71

Changelog (v7.4.17...v7.4.18)

  • bug #65753 Combine trusted host patterns into a single regexp (@nicolas-grekas)
  • bug #65743 Encode the path in the X-Accel-Redirect header (@Athorcis)
  • bug #65729 Reject reserved characters in the cookie path and domain (@nicolas-grekas)
  • bug #65741 Reject invalid paths (@nicolas-grekas)
  • bug #65725 Fix parsing hosts and schemes in URLs (@nicolas-grekas)
  • bug #65684 Do not unmarshall values that SodiumMarshaller cannot decrypt (@nicolas-grekas)
  • bug #65683 Allow-list the values of the "X-Sendfile-Type" header (@nicolas-grekas)
  • bug #65682 Ignore session ids that are not usable as file names in MockFileSessionStorage (@nicolas-grekas)

Contributors

nicolas-grekas and Athorcis
Assets 3
Loading