Symfony News

Symfony 5.4/6.0 curated new features

Symfony 5.4.0 and 6.0.0 have been released a few days ago. As for any other Symfony release, our backward compatibility promise applies and this means that you should be able to upgra...

Read more

---

A Week of Symfony #779 (29 November - 5 December 2021)

This week, Symfony 5.4.0 and 6.0.0 stable versions were released. In addition, SymfonyInsight announced its support for PHP 8.1. Finally, the SymfonyWorld Online conference is coming ...

Read more

---

A week left before SymfonyWorld Online 2021 Winter Edition, book your ticket now!

The SymfonyWorld Online 2021 Winter Edition conference starts next week. On Tuesday and Wednesday (December 7-8) there will be 10 workshops and on Thursday and Friday (December ...

Read more

---

New in Symfony 5.4: Misc. features (part 3)

This is the last blog post of the blog series that shows the new features of Symfony 5.4 and 6.0. We hope you enjoyed it and now want to upgrade your Symfony applications to these new...

Read more

---

SymfonyInsight now supports PHP 8.1!

SymfonyInsight is the official Symfony platform to monitor and maintain high quality projects over long periods of time. It also helps you reduce business risks and upgrade your appli...

Read more

---

New in Symfony 5.4: Misc. features (part 2)

Configurable Status Code in Templates Rendered From Routes Contributed by Dale Nash in #41414. ...

Read more

---

New in Symfony 5.4: Misc. features (part 1)

Strict Mode for Missing Assets Contributed by Jérôme Tamarelle in #38495. In Symfony appli...

Read more

---

New in Symfony 5.4: Serializer improvements

Symfony 5.4 was released yesterday, but we still have some blog posts pending to show its main new features. In this post we're highlighting the improvements added to the Serializer c...

Read more

---

Symfony 6.0.0 released

Symfony 6.0.0 has just been released. Here is a list of the most important changes: bug #44309 [Messenger] Leverage DBAL's getNativeConnection() method (@derrabus) bug #44300 [Framewo...

Read more

---

Symfony 5.4.0 released

Symfony 5.4.0 has just been released. Here is a list of the most important changes: bug #44309 [Messenger] Leverage DBAL's getNativeConnection() method (@derrabus) bug #44300 [Framewo...

Read more

---

A Week of Symfony #778 (22-28 November 2021)

This week, Symfony 4.4.35 and 5.3.12 releases were published to address some potential security vulnerabilities. In addition, Symfony 5.4.0-RC1 and 6.0.0-RC1 were published in prepara...

Read more

---

New in Symfony 5.4: Notifier integrations

The Notifier component was introduced in Symfony 5.2 as the best way to send notifications via one or more channels (email, SMS, chats, etc.) The component is already integrated with ...

Read more

---

Last Days of Symfony Black Friday 2021 Deals

Symfony Black Friday 2021 deals will end in just three days, on Monday, November 29, 2021. Here's a quick recap of this year's deals: 30% discount on Symfony and Twig certifications C...

Read more

---

New in Symfony 5.4: Profiler improvements

In addition to the redesigned logs panel, Symfony 5.4 includes other improvements related to the Symfony profiler. Conditional profiling ...

Read more

---

Two weeks left before SymfonyWorld Online 2021 Winter Edition, book your ticket now!

The SymfonyWorld Online 2021 Winter Edition conference will take place in just two weeks, on December 9-10, 2021. The event includes 25 talks covering a wide range of topics related t...

Read more

---

New in Symfony 5.4: Messenger Improvements

Configurable handlers with PHP attributes Contributed by Alireza Mirsepassi in #43588. PHP...

Read more

---

CVE-2021-41268: Remember me cookie persistance after password changes

Description Since the rework of the Remember me cookie in Symfony 5.3, the cookie is not invalidated anymore when the user changes its password. Attackers can therefore maintain the...

Read more

---

CVE-2021-41267: Webcache Poisoning via X-Forwarded-Prefix and sub-request

Description When a Symfony application is running behind a proxy or a load-balancer, you can tell Symfony to look for the X-Forwarded-* HTTP headers. HTTP headers that are not part o...

Read more

---

CVE-2021-41270: Prevent CSV Injection via formulas

Description CSV Injection, also known as Formula Injection, occurs when websites embed untrusted input inside CSV files. When a spreadsheet program opens a CSV, any cell starting wit...

Read more

---

Symfony 6.0.0-RC1 released

Symfony 6.0.0-RC1 has just been released. Here is a list of the most important changes: security #cve-2021-41268 [SecurityBundle] Default signature_properties to the previous behavior...

Read more

---