Movatterモバイル変換


[0]ホーム

URL:


Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Sign up
Appearance settings

[Security] Prefer clone() over unserialize(serialize()) for user refreshment#29621

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to ourterms of service andprivacy statement. We’ll occasionally send you account related emails.

Already on GitHub?Sign in to your account

Merged
nicolas-grekas merged 1 commit intosymfony:3.4fromchalasr:clone-token
Dec 17, 2018

Conversation

@chalasr
Copy link
Member

QA
Branch?3.4
Bug fix?yes
New feature?no
BC breaks?no
Deprecations?no
Tests pass?yes
Fixed tickets#29459
LicenseMIT
Doc PRn/a

To not hit theserialize() bug reported in the related ticket

samnela, yceruto, and famoser reacted with thumbs up emoji
Copy link
Member

@nicolas-grekasnicolas-grekas left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others.Learn more.

Using clone was discussed in#28072 (comment)
but here this php bug gives us no other choices.

Copy link
Member

@javiereguiluzjaviereguiluz left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others.Learn more.

I confirm that this fix solved the error for me. Thanks!

@nicolas-grekas
Copy link
Member

Thank you@chalasr.

@nicolas-grekasnicolas-grekas merged commita8eba80 intosymfony:3.4Dec 17, 2018
nicolas-grekas added a commit that referenced this pull requestDec 17, 2018
…r user refreshment (chalasr)This PR was merged into the 3.4 branch.Discussion----------[Security] Prefer clone() over unserialize(serialize()) for user refreshment| Q             | A| ------------- | ---| Branch?       | 3.4| Bug fix?      | yes| New feature?  | no| BC breaks?    | no| Deprecations? | no| Tests pass?   | yes| Fixed tickets |#29459| License       | MIT| Doc PR        | n/aTo not hit the `serialize()` bug reported in the related ticketCommits-------a8eba80 [Security] Prefer clone over unserialize(serialize()) for user refreshment
@chalasrchalasr deleted the clone-token branchDecember 17, 2018 10:58
This was referencedJan 6, 2019
Sign up for freeto join this conversation on GitHub. Already have an account?Sign in to comment

Reviewers

@javiereguiluzjaviereguiluzjaviereguiluz approved these changes

@nicolas-grekasnicolas-grekasnicolas-grekas approved these changes

+1 more reviewer

@ogizanagiogizanagiogizanagi approved these changes

Reviewers whose approvals may not affect merge requirements

Assignees

No one assigned

Projects

None yet

Milestone

3.4

Development

Successfully merging this pull request may close these issues.

5 participants

@chalasr@nicolas-grekas@javiereguiluz@ogizanagi@carsonbot

[8]ページ先頭

©2009-2025 Movatter.jp