diff --git a/UPGRADE.md b/UPGRADE.md index 2d156b0de4..91b60fca9c 100644 --- a/UPGRADE.md +++ b/UPGRADE.md @@ -32,6 +32,8 @@ Finally, run Composer: $ composer.phar install +Note: You must complete the upgrade steps below so composer can successfully generate the autoload files. + ### `app/autoload.php` The default `autoload.php` reads as follows (it has been simplified a lot as diff --git a/app/SymfonyRequirements.php b/app/SymfonyRequirements.php index 586b45604b..3861339967 100644 --- a/app/SymfonyRequirements.php +++ b/app/SymfonyRequirements.php @@ -500,9 +500,9 @@ function_exists('simplexml_import_dom'), $pcreVersion = defined('PCRE_VERSION') ? (float) PCRE_VERSION : null; $this->addRequirement( - null !== $pcreVersion && $pcreVersion > 8.0, - sprintf('PCRE extension must be available and at least 8.0 (%s installed)', $pcreVersion ? $pcreVersion : 'not'), - 'Upgrade your PCRE extension (8.0+).' + null !== $pcreVersion, + 'PCRE extension must be available', + 'Install the PCRE extension (version 8.0+).' ); /* optional recommendations follow */ @@ -531,6 +531,14 @@ function_exists('simplexml_import_dom'), 'Your project might not work properly due to the PHP bug #61453 ("Cannot dump definitions which have method calls"). Install PHP 5.4.1 or newer.' ); + if (null !== $pcreVersion) { + $this->addRecommendation( + $pcreVersion >= 8.0, + sprintf('PCRE extension should be at least version 8.0 (%s installed)', $pcreVersion), + 'PCRE 8.0+ is preconfigured in PHP since 5.3.2 but you are using an outdated version of it. Symfony probably works anyway but it is recommended to upgrade your PCRE extension.' + ); + } + $this->addRecommendation( class_exists('DomDocument'), 'PHP-XML module should be installed', diff --git a/app/config/config.yml b/app/config/config.yml index f82edf367c..16496c2388 100644 --- a/app/config/config.yml +++ b/app/config/config.yml @@ -13,8 +13,8 @@ framework: csrf_protection: true validation: { enable_annotations: true } templating: { engines: ['twig'] } #assets_version: SomeVersionScheme - default_locale: %locale% - trust_proxy_headers: false # Whether or not the Request object should trust proxy headers (X_FORWARDED_FOR/HTTP_CLIENT_IP) + default_locale: "%locale%" + trusted_proxies: ~ session: ~ # Twig Configuration diff --git a/app/config/routing.yml b/app/config/routing.yml index 684d3649d9..6c3a990140 100644 --- a/app/config/routing.yml +++ b/app/config/routing.yml @@ -1,4 +1,8 @@ # Internal routing configuration to handle ESI +# ****** WARNING ****** +# This route should be enabled with caution as it can open a security vulnerability +# see http://symfony.com/blog/security-release-symfony-2-0-20-and-2-1-5-released for more information +# ****** WARNING ****** #_internal: # resource: "@FrameworkBundle/Resources/config/routing/internal.xml" # prefix: /_internal