GHSA-97m3-w2cp-4xx6 VS Symfony

How safe is it to use? It may sound like fiction, but yes, dependencies can be dangerous. For example, an interesting feature was added to a library with 500k downloads: it tries to replace all files on the computer with ❤️ if your IP address falls within a specific range.

Source: CVE-2022-23812

I have not audited the malicious code myself, so you might be right, I'm going by the CVE reports that say it does this to arbitrary files.

Today Symfony Framework is one of most mature and stable frameworks in PHP universe and it have various good implemented solutions, as integration tests for example. But, personally I always thought that although is easy to do integration tests itself, to provide external dependencies for test It wasn't always so easy, as databases for example.

There is one global variable (an AppValriable) accessible in every template, which can give us info about the current request, user, or environment:

I have been using Angular to build my front-ends for much time and I wanted to try another framework. I usually read a lot of posts and articles about React and I decided to start learning it. As I am a Symfony lover, I decided to start my learning trying to integrate a React component by using the symfony/ux-react component. In this post, I will explain the steps I've followed to achieve it.

However, it’s recommended to use Symfony for its fast performance, ease of use, flexibility, and strong community support.

Some time ago, I worked with a team to rebuild a company's internal web application, which was based on a very outdated version of Symfony, and was no longer salvageable for several reasons.

Symfony security has a great feature to check authorization named Voters. Voters are services which allows you to check user authorization in the way you need. In this article, I would like to share with you another way to define custom authorization checking: Create our custom security attribute Let’s imagine we store user roles out of the User class (the one which implements the Symfony UserInterface) and we have a controller on which we only want to allow ROLE_SUPERUSER users.

Symfony

services: .... app: build: context: . dockerfile: Dockerfile hostname: app restart: unless-stopped container_name: symfony-app # A custom name to be used in build scripts depends_on: - db # requires the database service to be available ports: - "9980:80" # the service will be available in my browser at http://localhost:9980 volumes: - .:/var/www/project # all files in current directory will also be available in the container, allowing you to update the source code with your IDE - ./000-default.conf:/etc/apache2/sites-available/000-default.conf:ro # Override the default apache vhost file to ensure that the symfony application is served by default # the contents of 000-default.conf is obtained from https://symfony.com/doc/current/setup/web_server_configuration.html, with modifications applied to match folder locations