Movatterモバイル変換

[0]ホーム
URL:

Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

 Sign up
Appearance settings

[Security] Add logout configuration for Clear-Site-Data header#49306

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to ourterms of service andprivacy statement. We’ll occasionally send you account related emails.

Already on GitHub?Sign in to your account

Merged
fabpot merged 1 commit intosymfony:6.3frommaxbeckers:patch_49266_clear_site_data
Mar 10, 2023

Conversation

@maxbeckers
Copy link
Contributor

@maxbeckersmaxbeckers commentedFeb 9, 2023•
edited
Loading

QA
Branch?6.3
Bug fix?no
New feature?yes
Deprecations?no
TicketsFix#49266
LicenseMIT
Doc PRsymfony/symfony-docs#17900

Enhance security by issuing a Clear-Site-Data header on logout.

Default config is off.

Config example for all:

security:# ...firewalls:main:# ...logout:path:app_logoutclear_site_data:                    -"*"

Instead of all with the* it's also possible to add a set ofcache,cookies,storage,executionContexts. For example without cookies it will look like this:

security:# ...firewalls:main:# ...logout:path:app_logoutclear_site_data:                    -cache                    -storage                    -executionContexts

TODO

alexislefebvre, NazifToure01, and welcoMattic reacted with thumbs up emojiNazifToure01 and graste reacted with heart emojimaxhelias reacted with eyes emoji
@carsonbotcarsonbot added this to the6.3 milestoneFeb 9, 2023
@maxbeckersmaxbeckersforce-pushed thepatch_49266_clear_site_data branch 3 times, most recently from1cc1494 to9055e78CompareFebruary 9, 2023 07:19
@maxbeckersmaxbeckersforce-pushed thepatch_49266_clear_site_data branch 2 times, most recently from1a5ac23 toc20d516CompareFebruary 10, 2023 12:46
Copy link
Member

@nicolas-grekasnicolas-grekas left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others.Learn more.

doesn't miss some changes to an xsd file?

maxbeckers reacted with thumbs up emoji
@maxbeckersmaxbeckersforce-pushed thepatch_49266_clear_site_data branch 2 times, most recently from1cd02eb to95df250CompareFebruary 13, 2023 08:18
@maxbeckers
Copy link
ContributorAuthor

Thanks for your reviews@stof and@nicolas-grekas,
yes i missed the xsd file. now i've added as well some tests do verify the new settings. I hope i have now considered all the relevant points.

Copy link
Member

@nicolas-grekasnicolas-grekas left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others.Learn more.

Almost good to me :)

@maxbeckersmaxbeckersforce-pushed thepatch_49266_clear_site_data branch from95df250 tof9e76c1CompareFebruary 22, 2023 06:50
@fabpot
Copy link
Member

Thank you@maxbeckers.

@fabpotfabpot merged commit5c99187 intosymfony:6.3Mar 10, 2023
@teamflp
Copy link

Awesome

@maxbeckersmaxbeckers deleted the patch_49266_clear_site_data branchMarch 16, 2023 08:37
javiereguiluz added a commit to javiereguiluz/symfony-docs that referenced this pull requestMar 22, 2023
…e-Data header (maxbeckers)This PR was merged into the 6.3 branch.Discussion----------[Security] Add logout configuration for Clear-Site-Data headerThis PR is related tosymfony/symfony#49306.Enhance security by issuing a Clear-Site-Data header on logout.* [Clear-Site-Data](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Clear-Site-Data#sign_out_of_a_web_site) Documentation* Example:https://www.w3.org/TR/clear-site-data/#example-signoutAdd the documentation with code examples to the **Security Configuration Reference (SecurityBundle)**.Commits-------1ab4d04 [Security] Add logout configuration for Clear-Site-Data header
@fabpotfabpot mentioned this pull requestMay 1, 2023
Sign up for freeto join this conversation on GitHub. Already have an account?Sign in to comment

Reviewers

@stofstofstof left review comments

@OskarStarkOskarStarkOskarStark left review comments

@fabpotfabpotfabpot approved these changes

@nicolas-grekasnicolas-grekasnicolas-grekas approved these changes

@wouterjwouterjAwaiting requested review from wouterj

@chalasrchalasrAwaiting requested review from chalasrchalasr is a code owner

Assignees

No one assigned

Projects

None yet

Milestone

6.3

Development

Successfully merging this pull request may close these issues.

Enhance security by issuing a Clear-Site-Data header on logout

7 participants

@maxbeckers@fabpot@teamflp@nicolas-grekas@stof@OskarStark@carsonbot
[8]ページ先頭
©2009-2025 Movatter.jp