diff --git a/UPGRADE.md b/UPGRADE.md
index 2d156b0de4..91b60fca9c 100644
--- a/UPGRADE.md
+++ b/UPGRADE.md
@@ -32,6 +32,8 @@ Finally, run Composer:
$ composer.phar install
+Note: You must complete the upgrade steps below so composer can successfully generate the autoload files.
+
### `app/autoload.php`
The default `autoload.php` reads as follows (it has been simplified a lot as
diff --git a/app/SymfonyRequirements.php b/app/SymfonyRequirements.php
index 586b45604b..3861339967 100644
--- a/app/SymfonyRequirements.php
+++ b/app/SymfonyRequirements.php
@@ -500,9 +500,9 @@ function_exists('simplexml_import_dom'),
$pcreVersion = defined('PCRE_VERSION') ? (float) PCRE_VERSION : null;
$this->addRequirement(
- null !== $pcreVersion && $pcreVersion > 8.0,
- sprintf('PCRE extension must be available and at least 8.0 (%s installed)', $pcreVersion ? $pcreVersion : 'not'),
- 'Upgrade your PCRE extension (8.0+).'
+ null !== $pcreVersion,
+ 'PCRE extension must be available',
+ 'Install the PCRE extension (version 8.0+).'
);
/* optional recommendations follow */
@@ -531,6 +531,14 @@ function_exists('simplexml_import_dom'),
'Your project might not work properly due to the PHP bug #61453 ("Cannot dump definitions which have method calls"). Install PHP 5.4.1 or newer.'
);
+ if (null !== $pcreVersion) {
+ $this->addRecommendation(
+ $pcreVersion >= 8.0,
+ sprintf('PCRE extension should be at least version 8.0 (%s installed)', $pcreVersion),
+ 'PCRE 8.0+ is preconfigured in PHP since 5.3.2 but you are using an outdated version of it. Symfony probably works anyway but it is recommended to upgrade your PCRE extension.'
+ );
+ }
+
$this->addRecommendation(
class_exists('DomDocument'),
'PHP-XML module should be installed',
diff --git a/app/config/config.yml b/app/config/config.yml
index f82edf367c..16496c2388 100644
--- a/app/config/config.yml
+++ b/app/config/config.yml
@@ -13,8 +13,8 @@ framework:
csrf_protection: true
validation: { enable_annotations: true }
templating: { engines: ['twig'] } #assets_version: SomeVersionScheme
- default_locale: %locale%
- trust_proxy_headers: false # Whether or not the Request object should trust proxy headers (X_FORWARDED_FOR/HTTP_CLIENT_IP)
+ default_locale: "%locale%"
+ trusted_proxies: ~
session: ~
# Twig Configuration
diff --git a/app/config/routing.yml b/app/config/routing.yml
index 684d3649d9..6c3a990140 100644
--- a/app/config/routing.yml
+++ b/app/config/routing.yml
@@ -1,4 +1,8 @@
# Internal routing configuration to handle ESI
+# ****** WARNING ******
+# This route should be enabled with caution as it can open a security vulnerability
+# see http://symfony.com/blog/security-release-symfony-2-0-20-and-2-1-5-released for more information
+# ****** WARNING ******
#_internal:
# resource: "@FrameworkBundle/Resources/config/routing/internal.xml"
# prefix: /_internal