Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Appearance settings

[FrameworkBundle] Various fixes and hardenings#64268

Merged
nicolas-grekas merged 1 commit into
symfony:8.1symfony/symfony:8.1from
nicolas-grekas:81-fixes-framework-bundlenicolas-grekas/symfony:81-fixes-framework-bundleCopy head branch name to clipboard
May 19, 2026
Merged

[FrameworkBundle] Various fixes and hardenings#64268
nicolas-grekas merged 1 commit into
symfony:8.1symfony/symfony:8.1from
nicolas-grekas:81-fixes-framework-bundlenicolas-grekas/symfony:81-fixes-framework-bundleCopy head branch name to clipboard

Conversation

@nicolas-grekas
Copy link
Copy Markdown
Member

Q A
Branch? 8.1
Bug fix? yes
New feature? no
Deprecations? no
Issues -
License MIT

Adding missing option to configure uuid47_secret and other fixes.

@carsonbot carsonbot added this to the 8.1 milestone May 18, 2026
@nicolas-grekas nicolas-grekas merged commit 72207cf into symfony:8.1 May 19, 2026
9 of 12 checks passed
@nicolas-grekas nicolas-grekas deleted the 81-fixes-framework-bundle branch May 19, 2026 19:54
@fabpot fabpot mentioned this pull request May 20, 2026
nicolas-grekas added a commit that referenced this pull request May 20, 2026
…o (nicolas-grekas)

This PR was merged into the 7.4 branch.

Discussion
----------

[FrameworkBundle] Sign transports for unrouted messages too

| Q             | A
| ------------- | ---
| Branch?       | 7.4
| Bug fix?      | yes
| New feature?  | no
| Deprecations? | no
| Issues        | -
| License       | MIT

Transports can carry any message class regardless of routing, so every transport serializer must be decoration-eligible whenever signing is requested. Otherwise, handlers tagged with `sign: true` for messages not listed in the routing config receive unsigned payloads from the broker.

Backporting from #64268 as a hardening bugfix.

Commits
-------

d4dff0f [FrameworkBundle] Sign transports for unrouted messages too
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

Morty Proxy This is a proxified and sanitized view of the page, visit original site.