CHANGELOG for 2.3.x =================== This changelog references the relevant changes (bug and security fixes) done in 2.3 minor versions. To get the diff for a specific change, go to https://github.com/symfony/symfony/commit/XXX where XXX is the change hash To get the diff between two versions, go to https://github.com/symfony/symfony/compare/v2.3.0...v2.3.1 * 2.3.42 (2016-05-30) * bug #18908 [DependencyInjection] force enabling the external XML entity loaders (xabbuh) * bug #18893 [DependencyInjection] Skip deep reference check for 'service_container' (RobertMe) * bug #18812 Catch \Throwable (fprochazka) * bug #18821 [Form] Removed UTC specification with timestamp (francisbesset) * bug #18861 Fix for #18843 (inso) * bug #18907 [Routing] Fix the annotation loader taking a class constant as a beginning of a class name (jakzal, nicolas-grekas) * bug #18864 [Console][DX] Fixed ambiguous error message when using a duplicate option shortcut (peterrehm) * bug #18844 [Yaml] fix exception contexts (xabbuh) * bug #18840 [Yaml] properly handle unindented collections (xabbuh) * bug #18839 People - person singularization (Keeo) * bug #18828 [Yaml] chomp newlines only at the end of YAML documents (xabbuh) * bug #18635 [Console] Prevent fatal error when calling Command::getHelper without helperSet (chalasr) * bug #18761 [Form] Modified iterator_to_array's 2nd parameter to false in ViolationMapper (issei-m) * 2.3.41 (2016-05-09) * security #18733 limited the maximum length of a submitted username (fabpot) * bug #18709 [DependencyInjection] top-level anonymous services must be public (xabbuh) * 2.3.40 (2016-04-29) * bug #18246 [DependencyInjection] fix ambiguous services schema (backbone87) * bug #18603 [PropertyAccess] ->getValue() should be read-only (nicolas-grekas) * bug #18280 [Routing] add query param if value is different from default (Tobion) * bug #18515 [Filesystem] Better error handling in remove() (nicolas-grekas) * bug #18449 [PropertyAccess] Fix regression (nicolas-grekas) * bug #18467 [DependencyInjection] Resolve aliases before removing abstract services + add tests (nicolas-grekas) * bug #18460 [DomCrawler] Fix select option with empty value (Matt Wells) * bug #18425 [Security] Fixed SwitchUserListener when exiting an impersonation with AnonymousToken (lyrixx) * bug #18317 [Form] fix "prototype" not required when parent form is not required (HeahDude) * bug #18439 [Logging] Add support for Firefox (43+) in ChromePhpHandler (arjenm) * bug #18385 Detect CLI color support for Windows 10 build 10586 (mlocati) * bug #18426 [EventDispatcher] Try first if the event is Stopped (lyrixx) * bug #18265 Optimize ReplaceAliasByActualDefinitionPass (ajb-in) * bug #18358 [Form] NumberToLocalizedStringTransformer should return floats when possible (nicolas-grekas) * bug #17926 [DependencyInjection] Enable alias for service_container (hason) * bug #18336 [Debug] Fix handling of php7 throwables (nicolas-grekas) * bug #18312 [ClassLoader] Fix storing not-found classes in APC cache (nicolas-grekas) * bug #18255 [HttpFoundation] Fix support of custom mime types with parameters (Ener-Getick) * bug #18259 [PropertyAccess] Backport fixes from 2.7 (nicolas-grekas) * bug #18224 [PropertyAccess] Remove most ref mismatches to improve perf (nicolas-grekas) * bug #18210 [PropertyAccess] Throw an UnexpectedTypeException when the type do not match (dunglas, nicolas-grekas) * bug #18216 [Intl] Fix invalid numeric literal on PHP 7 (nicolas-grekas) * bug #18147 [Validator] EmailValidator cannot extract hostname if email contains multiple @ symbols (natechicago) * bug #18175 [Translation] Add support for fuzzy tags in PoFileLoader (nud) * bug #18179 [Form] Fix NumberToLocalizedStringTransformer::reverseTransform with big integers (ovrflo, nicolas-grekas) * bug #18164 [HttpKernel] set s-maxage only if all responses are cacheable (xabbuh) * 2.3.39 (2016-03-13) * bug #18080 [HttpFoundation] Set the Content-Range header if the requested Range is unsatisfied (jakzal) * bug #18084 [HttpFoundation] Avoid warnings when checking malicious IPs (jakzal) * bug #18048 [HttpKernel] Fix mem usage when stripping the prod container (nicolas-grekas) * bug #18065 [Finder] Partially revert #17134 to fix a regression (jakzal) * bug #18018 [HttpFoundation] exception when registering bags for started sessions (xabbuh) * bug #18054 [Filesystem] Fix false positive in ->remove() (nicolas-grekas) * bug #18049 [Validator] Fix the locale validator so it treats a locale alias as a valid locale (jakzal) * bug #18019 [Intl] Update ICU to version 55 (jakzal) * bug #16656 [HttpFoundation] automatically generate safe fallback filename (xabbuh) * bug #15794 [Console] default to stderr in the console helpers (alcohol) * bug #17984 Allow to normalize \Traversable when serializing xml (Ener-Getick) * bug #17434 Improved the error message when a template is not found (rvanginneken, javiereguiluz) * bug #17894 [FrameworkBundle] Fix a regression in handling absolute template paths (jakzal) * bug #17595 [HttpKernel] Remove _path from query parameters when fragment is a subrequest (cmenning) * bug #17986 [DomCrawler] Dont use LIBXML_PARSEHUGE by default (nicolas-grekas) * bug #17668 add 'guid' to list of exception to filter out (garak) * bug #17615 Ensure backend slashes for symlinks on Windows systems (cpsitgmbh) * bug #17626 Try to delete broken symlinks (IchHabRecht) * bug #17978 [Yaml] ensure dump indentation to be greather than zero (xabbuh) * bug #17976 [WebProfilerBundle] fix debug toolbar rendering by removing inadvertently added links (craue) * bug #17971 Variadic controller params (NiR-, fabpot) * bug #17925 [Bridge] The WebProcessor now forwards the client IP (magnetik) * 2.3.38 (2016-02-28) * bug #17947 Fix - #17676 (backport #17919 to 2.3) (Ocramius) * bug #17942 Fix bug when using an private aliased factory service (WouterJ) * bug #17542 ChoiceFormField of type "select" could be "disabled" (bouland) * bug #17602 [HttpFoundation] Fix BinaryFileResponse incorrect behavior with if-range header (bburnichon) * bug #17914 [Console] Fix escaping of trailing backslashes (nicolas-grekas) * bug #17074 Fix constraint validator alias being required (Triiistan) * bug #17867 [DependencyInjection] replace alias in factory services (xabbuh) * bug #17569 [FrameworkBundle] read commands from bundles when accessing list (havvg) * bug #16987 [FileSystem] Windows fix (flip111) * bug #17835 [Yaml] fix default timezone to be UTC (xabbuh) * bug #17823 [DependencyInjection] fix dumped YAML string (xabbuh) * bug #17814 [DependencyInjection] fix dumped YAML snytax (xabbuh) * bug #17099 [Form] Fixed violation mapping if multiple forms are using the same (or part of the same) property path (alekitto) * bug #17719 [DependencyInjection] fixed exceptions thrown by get method of ContainerBuilder (lukaszmakuch) * bug #17742 [DependencyInjection] Fix #16461 Container::set() replace aliases (mnapoli) * bug #17745 Added more exceptions to singularify method (javiereguiluz) * bug #17766 Fixed (string) catchable fatal error for PHP Incomplete Class instances (yceruto) * bug #17757 [HttpFoundation] BinaryFileResponse sendContent return as parent. (2.3) (SpacePossum) * bug #17702 [TwigBridge] forward compatibility with Yaml 3.1 (xabbuh) * bug #17672 [DependencyInjection][Routing] add files used in FileResource objects (xabbuh) * bug #17596 [Translation] Add resources from fallback locale to parent catalogue (c960657) * bug #16956 [DependencyInjection] XmlFileLoader: enforce tags to have a name (xabbuh) * bug #16265 [BrowserKit] Corrected HTTP_HOST logic (Naktibalda) * bug #17555 [DependencyInjection] resolve aliases in factory services (xabbuh) * bug #15272 [FrameworkBundle] Fix template location for PHP templates (jakzal) * bug #11232 [Routing] Fixes fatal errors with object resources in AnnotationDirectoryLoader::supports (Tischoi) * bug #17526 Escape the delimiter in Glob::toRegex (javiereguiluz) * bug #17527 fixed undefined variable (fabpot) * bug #15706 [framework-bundle] Added support for the `0.0.0.0/0` trusted proxy (zerkms) * bug #16274 [HttpKernel] Lookup the response even if the lock was released after two second wait (jakzal) * bug #17355 [DoctrineBridge][Validator] >= 2.3 Pass association instead of ID as argument (xavismeh) * bug #16736 [Request] Ignore invalid IP addresses sent by proxies (GromNaN) * bug #16873 Able to load big xml files with DomCrawler (zorn-v) * bug #16897 [Form] Fix constraints could be null if not set (DZunke) * bug #17505 sort bundles in config:dump-reference command (xabbuh) * bug #17478 [HttpFoundation] Do not overwrite the Authorization header if it is already set (jakzal) * bug #17461 [Yaml] tag for dumped PHP objects must be a local one (xabbuh) * bug #17423 [Process] Use stream based storage to avoid memory issues (romainneutron) * bug #17373 [SecurityBundle] fix SecureRandom service constructor args (Tobion) * bug #17377 Fix performance (PHP5) and memory (PHP7) issues when using token_get_all (nicolas-grekas, peteward) * bug #17389 [Routing] Fixed correct class name in thrown exception (fixes #17388) (robinvdvleuten) * bug #17358 [ClassLoader] Use symfony/polyfill-apcu (nicolas-grekas) * bug #17370 [HttpFoundation][Cookie] Cookie DateTimeInterface fix (wildewouter) * 2.3.37 (2016-01-14) * security #17359 do not ship with a custom rng implementation (xabbuh, fabpot) * bug #17326 [Console] Display console application name even when no version set (polc) * bug #17140 [Serializer] Remove normalizer cache in Serializer class (jvasseur) * bug #17307 [FrameworkBundle] Fix paths with % in it (like urlencoded) (scaytrase) * bug #17078 [Bridge] [Doctrine] [Validator] Added support \IteratorAggregate for UniqueEntityValidator (Disparity) * bug #17287 [HttpKernel] Forcing string comparison on query parameters sort in UriSigner (Tim van Densen) * bug #17278 [FrameworkBundle] Add case in Kernel directory guess for PHPUnit (tgalopin) * bug #17276 [Process] Fix potential race condition (nicolas-grekas) * bug #17183 [FrameworkBundle] Set the kernel.name properly after a cache warmup (jakzal) * bug #17159 [Yaml] recognize when a block scalar is left (xabbuh) * bug #17195 bug #14246 [Filesystem] dumpFile() non atomic (Hidde Boomsma) * bug #17177 [Process] Fix potential race condition leading to transient tests (nicolas-grekas) * 2.3.36 (2015-12-26) * bug #16864 [Yaml] fix indented line handling in folded blocks (xabbuh) * bug #16826 Embedded identifier support (mihai-stancu) * bug #17129 [Config] Fix array sort on normalization in edge case (romainneutron) * bug #17094 [Process] More robustness and deterministic tests (nicolas-grekas) * bug #17112 [PropertyAccess] Reorder elements array after PropertyPathBuilder::replace (alekitto) * bug #16797 [Filesystem] Recursively widen non-executable directories (Slamdunk) * bug #17040 [Console] Avoid extra blank lines when rendering exceptions (ogizanagi) * bug #17055 [Security] Verify if a password encoded with bcrypt is no longer than 72 characters (jakzal) * bug #16959 [Form] fix #15544 when a collection type attribute "required" is false, "prototype" should too (HeahDude) * bug #16860 [Yaml] do not remove "comments" in scalar blocks (xabbuh) * bug #16971 [HttpFoundation] Added the ability of using BinaryFileResponse with stream wrappers (jakzal, Sander-Toonen) * bug #17048 Fix the logout path when not using the router (stof) * bug #17057 [FrameworkBundle][HttpKernel] the finder is required to discover bundle commands (xabbuh) * bug #16915 [Process] Enhance compatiblity with --enable-sigchild (nicolas-grekas) * bug #16829 [FrameworkBundle] prevent cache:clear creating too long paths (Tobion) * bug #16870 [FrameworkBundle] Disable the server:run command when Process component is missing (gnugat, xabbuh) * bug #16799 Improve error message for undefined DIC aliases (mpdude) * bug #16772 Refactoring EntityUserProvider::__construct() to not do work, cause cache warm error (weaverryan) * bug #16753 [Process] Fix signaling/stopping logic on Windows (nicolas-grekas) * bug #16733 [Console] do not encode backslashes in console default description (Tobion) * bug #16312 [HttpKernel] clearstatcache() so the Cache sees when a .lck file has been released (mpdude) * bug #16695 [SecurityBundle] disable the init:acl command if ACL is not used (Tobion) * bug #16676 [HttpFoundation] Workaround HHVM rewriting HTTP response line (nicolas-grekas) * bug #16668 [ClassLoader] Fix parsing namespace when token_get_all() is missing (nicolas-grekas) * bug #16386 Bug #16343 [Router] Too many Routes ? (jelte) * 2.3.35 (2015-11-23) * security #16631 CVE-2015-8124: Session Fixation in the "Remember Me" Login Feature (xabbuh) * security #16630 CVE-2015-8125: Potential Remote Timing Attack Vulnerability in Security Remember-Me Service (xabbuh) * bug #16588 Sent out a status text for unknown HTTP headers. (dawehner) * bug #16295 [DependencyInjection] Unescape parameters for all types of injection (Nicofuma) * bug #16574 [Process] Fix PhpProcess with phpdbg runtime (nicolas-grekas) * bug #16352 Fix the server variables in the router_*.php files (leofeyer) * bug #16537 [Validator] Allow an empty path with a non empty fragment or a query (jakzal) * bug #16528 [Translation] Add support for Armenian pluralization. (marcosdsanchez) * bug #16510 [Process] fix Proccess run with pts enabled (ewgRa) * bug #16292 fix race condition at mkdir (#16258) (ewgRa) * bug #16462 [PropertyAccess] Fix dynamic property accessing. (dunglas) * bug #16294 [PropertyAccess] Major performance improvement (dunglas) * bug #16331 fixed Twig deprecation notices (fabpot) * bug #16306 [DoctrineBridge] Fix issue which prevent the profiler to explain a query (Baachi) * bug #16359 Use mb_detect_encoding with $strict = true (nicolas-grekas) * bug #16144 [Security] don't allow to install the split Security packages (xabbuh) * 2.3.34 (2015-10-27) * bug #16288 [Process] Inherit env vars by default in PhpProcess (nicolas-grekas) * bug #16302 [DoctrineBridge] Fix required guess of boolean fields (enumag) * bug #16177 [HttpFoundation] Fixes /0 subnet handling in IpUtils (ultrafez) * bug #16259 [Validator] Allow an empty path in a URL with only a fragment or a query (jakzal) * bug #16226 [filesystem] makeRelativePath does not work correctly from root (jaytaph, fabpot) * bug #16182 [Process] Workaround buggy PHP warning (cbj4074) * bug #16095 [Console] Add additional ways to detect OS400 platform (johnkary) * bug #15793 [Yaml] Allow tabs before comments at the end of a line (superdav42) * bug #16152 Fix URL validator failure with empty string (fabpot, bocharsky-bw) * bug #15121 fixed #15118 [Filesystem] mirroring a symlink copies absolute file path (danepowell) * bug #15161 avoid duplicated path with addPrefix (remicollet) * bug #16133 compatibility with Security component split (xabbuh) * bug #16123 Command list ordering fix (spdionis, fabpot) * bug #14842 [Security][bugfix] "Remember me" cookie cleared on logout with custom "secure"/"httponly" config options (MacDada) * bug #13627 [Security] InMemoryUserProvider now concerns whether user's password is changed when refreshing (issei-m) * bug #16090 Fix PropertyAccessor modifying array in object when array key does no… (pierredup) * bug #16111 Throw exception if tempnam returns false in ProcessPipes (pierredup) * bug #16053 [Console] use PHP_OS instead of php_uname('s') (xabbuh) * bug #15860 [Yaml] Fix improper comments removal (ogizanagi) * bug #16050 [TwigBundle] fix useless and failing test (Tobion) * bug #15482 [Yaml] Improve newline handling in folded scalar blocks (teohhanhui) * bug #15976 [Console] do not make the getHelp() method smart (xabbuh) * bug #15799 [HttpFoundation] NativeSessionStorage `regenerate` method wrongly sets storage as started (iambrosi) * bug #15533 [Console] Fix input validation when required arguments are missing (jakzal) * bug #15915 Detect Mintty for color support on Windows (stof) * bug #15906 Forbid serializing a Crawler (stof) * bug #15682 [Form] Added exception when setAutoInitialize() is called when locked (jaytaph) * bug #15846 [FrameworkBundle] Advanced search templates of bundles (yethee) * bug #15895 [Security] Allow user providers to be defined in many files (lyrixx) * 2.3.33 (2015-09-25) * bug #15821 [EventDispatcher] fix memory leak in getListeners (Tobion) * bug #15826 [Finder] Optimize the hot-path (nicolas-grekas) * bug #15802 [Finder] Handle filtering of recursive iterators and use it to skip looping over excluded directories (nicolas-grekas) * bug #15803 [Finder] Exclude files based on path before applying the sorting (stof) * bug #13794 [DomCrawler] Invalid uri created from forms if base tag present (danez) * bug #15637 Use ObjectManager interface instead of EntityManager (gnat42) * bug #14802 [HttpKernel] fix broken multiline (sstok) * bug #14841 [DoctrineBridge] Fixed #14840 (saksmt) * bug #15770 [Yaml] Fix the parsing of float keys (jmgq) * bug #15771 [Console] Ensure the console output is only detected as decorated when both stderr and stdout support colors (Seldaek) * bug #15750 Add tests to the recently added exceptions thrown from YamlFileLoaders (jakzal) * bug #15718 Fix that two DirectoryResources with different patterns would be deduplicated (mpdude) * bug #14916 [WebProfilerBundle] Added tabindex="-1" to not interfer with normal UX (drAlberT) * bug #15725 Dispatch console.terminate *after* console.exception (Seldaek) * bug #15731 improve exceptions when parsing malformed files (xabbuh) * bug #15729 [Kernel] Integer version constants (Tobion) * bug #15527 [Translator][fallback catalogues] fixed circular reference. (aitboudad) * 2.3.32 (2015-09-01) * bug #15601 [console] Use the description when no help is available (Nicofuma) * bug #15603 [HttpKernel] Do not normalize the kernel root directory path #15567 (leofeyer) * bug #15428 Fix the validation of form resources to register the default theme (stof) * bug #15619 [Translation] Fix the string casting in the XliffFileLoader (stof) * bug #15575 Add appveyor.yml for C.I. on Windows (nicolas-grekas) * bug #15611 [Translation][Xliff Loader] Support omitting the node in an .xlf file. (leofeyer) * bug #15549 [FrameworkBundle] Fix precedence of xdebug.file_link_format (nicolas-grekas) * bug #15589 made Symfony compatible with both Twig 1.x and 2.x (fabpot) * bug #15535 made Symfony compatible with both Twig 1.x and 2.x (fabpot) * bug #14372 [DoctrineBridge][Form] fix EntityChoiceList when indexing by primary foreign key (giosh94mhz) * bug #15489 Implement the support of timezone objects in the stub IntlDateFormatter (stof) * bug #15426 [Serializer] Add support for variadic arguments in the GetSetNormalizer (stof) * bug #15480 [Yaml] Nested merge keys (mathroc) * bug #15445 do not remove space between attributes (greg0ire) * bug #15263 [HttpFoundation] fixed the check of 'proxy-revalidate' in Response::mustRevalidate() (axiac) * bug #15425 [Routing] Fix the retrieval of the default value for variadic arguments in the annotation loader (wdalmut, stof) * bug #15074 Fixing DbalSessionHandler to work with a Oracle "limitation" or bug? (nuncanada) * bug #15380 do not dump leading backslashes in class names (xabbuh) * bug #15376 [ClassMapGenerator] Skip ::class constant (WouterJ) * bug #15170 [Config] type specific check for emptiness (xabbuh) * bug #15411 Fix the handling of null as locale in the stub intl classes (stof) * bug #15413 Fix the return value on error for intl methods returning arrays (stof) * bug #15392 Fix missing _route parameter notice in RouterListener logging case (Haehnchen) * bug #15386 [php7] Fix for substr() always returning a string (nicolas-grekas) * bug #15355 [Security] Do not save the target path in the session for a stateless firewall (lyrixx) * bug #15330 [Console] Fix console output with closed stdout (jakzal) * bug #15326 [Security] fix check for empty usernames (xabbuh) * bug #15249 [HttpFoundation] [PSR-7] Allow to use resources as content body and to return resources from string content (dunglas) * bug #15282 [HttpFoundation] Behaviour change in PHP7 for substr (Nicofuma) * 2.3.31 (2015-07-13) * bug #15248 Added 'default' color (jaytaph) * bug #15243 Reload the session after regenerating its id (jakzal) * bug #15202 [Security] allow to use `method` in XML configs (xabbuh) * bug #15223 [Finder] Command::addAtIndex() fails with Command instance argument (thunderer) * bug #15220 [DependencyInjection] Freeze also FrozenParameterBag::remove (lyrixx) * bug #15110 Add a way to reset the singleton (dawehner) * bug #15163 Update DateTimeToArrayTransformer.php (zhil) * bug #15150 [Translation] Azerbaijani language pluralization rule is wrong (shehi) * bug #15146 Towards 100% HHVM compat (nicolas-grekas) * bug #15069 [Form] Fixed: Data mappers always receive forms indexed by their names (webmozart) * bug #15137 [Security] Initialize SwitchUserEvent::targetUser on attemptExitUser (Rvanlaak, xabbuh) * bug #15083 [DependencyInjection] Fail when dumping a Definition with no class nor factory (nicolas-grekas) * bug #15127 [Validator] fix validation for Maestro UK card numbers (xabbuh) * bug #15128 DbalLogger: Small nonutf8 array fix (vpetrovych, weaverryan) * bug #15048 [Translation][Form][choice] empty_value shouldn't be translated when it has an empty value (Restless-ET) * bug #15117 [Form] fixed sending non array data on submit to ResizeListener (BruceWouaigne) * bug #15086 Fixed the regexp for the validator of Maestro-based credit/debit cards (javiereguiluz) * bug #15058 [Console] Fix STDERR output text on IBM iSeries OS400 (johnkary) * bug #15065 [Form] Fixed: remove quoted strings from Intl date formats (e.g. es_ES full pattern) (webmozart) * bug #15039 [Translation][update cmd] taken account into bundle overrides path. (aitboudad) * bug #14964 [bugfix][MonologBridge] WebProcessor: passing $extraFields to BaseWebProcessor (MacDada) * bug #15027 [Form] Fixed: Filter non-integers when selecting entities by int ID (webmozart, nicolas-grekas) * bug #15000 [Debug] Fix fatal-errors handling on HHVM (nicolas-grekas) * bug #14897 Allow new lines in Messages translated with transchoice() (replacement for #14867) (azine) * bug #14895 [Form] Support DateTimeImmutable in transform() (c960657) * bug #14859 Improve the config validation in TwigBundle (stof) * bug #14785 [BrowserKit] Fix bug when uri starts with http. (amouhzi) * bug #14807 [Security][Acl] enforce string identifiers (xabbuh) * 2.3.30 (2015-05-30) * bug #14262 [REVERTED] [TwigBundle] Refresh twig paths when resources change. (aitboudad) * 2.3.29 (2015-05-26) * security #14759 CVE-2015-4050 [HttpKernel] Do not call the FragmentListener if _controller is already defined (jakzal) * bug #14715 [Form] Check instance of FormBuilderInterface instead of FormBuilder (dosten) * bug #14678 [Security] AbstractRememberMeServices::encodeCookie() validates cookie parts (MacDada) * bug #14635 [HttpKernel] Handle an array vary header in the http cache store (jakzal) * bug #14513 [console][formater] allow format toString object. (aitboudad) * bug #14335 [HttpFoundation] Fix baseUrl when script filename is contained in pathInfo (danez) * bug #14593 [Security][Firewall] Avoid redirection to XHR URIs (asiragusa) * bug #14618 [DomCrawler] Throw an exception if a form field path is incomplete (jakzal) * bug #14698 Fix HTML escaping of to-source links (nicolas-grekas) * bug #14690 [HttpFoundation] IpUtils::checkIp4() should allow `/0` networks (zerkms) * bug #14262 [TwigBundle] Refresh twig paths when resources change. (aitboudad) * bug #13633 [ServerBag] Handled bearer authorization header in REDIRECT_ form (Lance0312) * bug #13637 [CSS] WebProfiler break words (nicovak) * bug #14633 [EventDispatcher] make listeners removable from an executed listener (xabbuh) * 2.3.28 (2015-05-10) * bug #14266 [HttpKernel] Check if "symfony/proxy-manager-bridge" package is installed (hason) * bug #14501 [ProxyBridge] Fix proxy classnames generation (xphere) * bug #14498 [FrameworkBundle] Added missing log in server:run command (lyrixx) * bug #14484 [SecurityBundle][WebProfiler] check authenticated user by tokenClass instead of username. (aitboudad) * bug #14497 [HttpFoundation] Allow curly braces in trusted host patterns (sgrodzicki) * bug #14436 Show a better error when the port is in use (dosten) * bug #14463 [Validator] Fixed Choice when an empty array is used in the "choices" option (webmozart) * bug #14402 [FrameworkBundle][Translation] Check for 'xlf' instead of 'xliff' (xelaris) * bug #14272 [FrameworkBundle] Workaround php -S ignoring auto_prepend_file (nicolas-grekas) * bug #14345 [FrameworkBundle] Fix Routing\DelegatingLoader resiliency to fatal errors (nicolas-grekas) * bug #14325 [Routing][DependencyInjection] Support .yaml extension in YAML loaders (thunderer) * bug #14344 [Translation][fixed test] refresh cache when resources are no longer fresh. (aitboudad) * bug #14268 [Translator] Cache does not take fallback locales into consideration (sf2.3) (mpdude) * bug #14192 [HttpKernel] Embed the original exception as previous to bounced exceptions (nicolas-grekas) * bug #14102 [Enhancement] netbeans - force interactive shell when limited detection (cordoval) * bug #14191 [StringUtil] Fixed singularification of 'movies' (GerbenWijnja) * 2.3.27 (2015-04-01) * security #14167 CVE-2015-2308 (nicolas-grekas) * security #14166 CVE-2015-2309 (neclimdul) * bug #14010 Replace GET parameters when changed in form (WouterJ) * bug #13991 [Dependency Injection] Improve PhpDumper Performance for huge Containers (BattleRattle) * bug #13997 [2.3+][Form][DoctrineBridge] Improved loading of entities and documents (guilhermeblanco) * bug #13953 [Translation][MoFileLoader] fixed load empty translation. (aitboudad) * bug #13912 [DependencyInjection] Highest precedence for user parameters (lyrixx) * 2.3.26 (2015-03-17) * bug #13927 Fixing wrong variable name from #13519 (weaverryan) * bug #13519 [DependencyInjection] fixed service resolution for factories (fabpot) * bug #13901 [Bundle] Fix charset config (nicolas-grekas, bamarni) * bug #13911 [HttpFoundation] MongoDbSessionHandler::read() now checks for valid session age (bzikarsky) * bug #13890 Fix XSS in Debug exception handler (fabpot) * bug #13744 minor #13377 [Console] Change greater by greater or equal for isFresh in FileResource (bijibox) * bug #13708 [HttpFoundation] fixed param order for Nginx's x-accel-mapping (phansys) * bug #13767 [HttpKernel] Throw double-bounce exceptions (nicolas-grekas) * bug #13769 [Form] NativeRequestHandler file handling fix (mpajunen) * bug #13779 [FrameworkBundle] silence E_USER_DEPRECATED in insulated clients (nicolas-grekas) * bug #13715 Enforce UTF-8 charset for core controllers (WouterJ) * bug #13683 [PROCESS] make sure /dev/tty is readable (staabm) * bug #13733 [Process] Fixed PhpProcess::getCommandLine() result (francisbesset) * bug #13618 [PropertyAccess] Fixed invalid feedback -> foodback singularization (WouterJ) * bug #13630 [Console] fixed ArrayInput, if array contains 0 key. (arima-ryunosuke) * bug #13647 [FrameworkBundle] Fix title and placeholder rendering in php form templates (jakzal) * bug #13607 [Console] Fixed output bug, if escaped string in a formatted string. (tronsha) * bug #13466 [Security] Remove ContextListener's onKernelResponse listener as it is used (davedevelopment) * bug #12864 [Console][Table] Fix cell padding with multi-byte (ttsuruoka) * bug #13375 [YAML] Fix one-liners to work with multiple new lines (Alex Pott) * bug #13545 fixxed order of usage (OskarStark) * bug #13567 [Routing] make host matching case-insensitive (Tobion) * 2.3.25 (2015-01-30) * bug #13528 [Validator] reject ill-formed strings (nicolas-grekas) * bug #13525 [Validator] UniqueEntityValidator - invalidValue fixed. (Dawid Sajdak) * bug #13527 [Validator] drop grapheme_strlen in LengthValidator (nicolas-grekas) * bug #13376 [FrameworkBundle][config] allow multiple fallback locales. (aitboudad) * bug #12972 Make the container considered non-fresh if the environment parameters are changed (thewilkybarkid) * bug #13309 [Console] fixed 10531 (nacmartin) * bug #13352 [Yaml] fixed parse shortcut Key after unindented collection. (aitboudad) * bug #13039 [HttpFoundation] [Request] fix baseUrl parsing to fix wrong path_info (rk3rn3r) * bug #13250 [Twig][Bridge][TranslationDefaultDomain] add support of named arguments. (aitboudad) * bug #13332 [Console] ArgvInput and empty tokens (Taluu) * bug #13293 [EventDispatcher] Add missing checks to RegisterListenersPass (znerol) * bug #13262 [Yaml] Improve YAML boolean escaping (petert82, larowlan) * bug #13420 [Debug] fix loading order for legacy classes (nicolas-grekas) * bug #13371 fix missing comma in YamlDumper (garak) * bug #13365 [HttpFoundation] Make use of isEmpty() method (xelaris) * bug #13347 [Console] Helper\TableHelper->addRow optimization (boekkooi) * bug #13346 [PropertyAccessor] Allow null value for a array (2.3) (boekkooi) * bug #13170 [Form] Set a child type to text if added to the form without a type. (jakzal) * bug #13334 [Yaml] Fixed #10597: Improved Yaml directive parsing (VictoriaQ) * 2.3.24 (2015-01-07) * bug #13286 [Security] Don't destroy the session on buggy php releases. (derrabus) * bug #12417 [HttpFoundation] Fix an issue caused by php's Bug #66606. (wusuopu) * bug #13200 Don't add Accept-Range header on unsafe HTTP requests (jaytaph) * bug #12491 [Security] Don't send remember cookie for sub request (blanchonvincent) * bug #12574 [HttpKernel] Fix UriSigner::check when _hash is not at the end of the uri (nyroDev) * bug #13185 Fixes Issue #13184 - incremental output getters now return empty strings (Bailey Parker) * bug #13145 [DomCrawler] Fix behaviour with tag (dkop, WouterJ) * bug #13141 [TwigBundle] Moved the setting of the default escaping strategy from the Twig engine to the Twig environment (fabpot) * bug #13114 [HttpFoundation] fixed error when an IP in the X-Forwarded-For HTTP head... (fabpot) * bug #12572 [HttpFoundation] fix checkip6 (Neime) * bug #13075 [Config] fix error handler restoration in test (nicolas-grekas) * bug #13081 [FrameworkBundle] forward error reporting level to insulated Client (nicolas-grekas) * bug #13053 [FrameworkBundle] Fixed Translation loader and update translation command. (saro0h) * bug #13048 [Security] Delete old session on auth strategy migrate (xelaris) * bug #12999 [FrameworkBundle] fix cache:clear command (nicolas-grekas) * bug #13004 add a limit and a test to FlattenExceptionTest. (Daniel Wehner) * bug #12961 fix session restart on PHP 5.3 (Tobion) * bug #12761 [Filesystem] symlink use RealPath instead LinkTarget (aitboudad) * bug #12855 [DependencyInjection] Perf php dumper (nicolas-grekas) * bug #12894 [FrameworkBundle][Template name] avoid error message for the shortcut n... (aitboudad) * bug #12858 [ClassLoader] Fix undefined index in ClassCollectionLoader (szicsu) * 2.3.23 (2014-12-03) * bug #12811 Configure firewall's kernel exception listener with configured entry point or a default entry point (rjkip) * bug #12784 [DependencyInjection] make paths relative to __DIR__ in the generated container (nicolas-grekas) * bug #12716 [ClassLoader] define constant only if it wasn't defined before (xabbuh) * bug #12553 [Debug] fix error message on double exception (nicolas-grekas) * bug #12550 [FrameworkBundle] backport #12489 (xabbuh) * bug #12570 Fix initialized() with aliased services (Daniel Wehner) * bug #12137 [FrameworkBundle] cache:clear command fills *.php.meta files with wrong data (Strate) * 2.3.22 (2014-11-20) * bug #12525 [Bundle][FrameworkBundle] be smarter when guessing the document root (xabbuh) * bug #12296 [SecurityBundle] Authentication entry point is only registered with firewall exception listener, not with authentication listeners (rjkip) * bug #12393 [DependencyInjection] inlined factory not referenced (boekkooi) * bug #12436 [Filesystem] Fixed case for empty folder (yosmanyga) * bug #12370 [Yaml] improve error message for multiple documents (xabbuh) * bug #12170 [Form] fix form handling with OPTIONS request method (Tobion) * bug #12235 [Validator] Fixed Regex::getHtmlPattern() to work with complex and negated patterns (webmozart) * bug #12326 [Session] remove invalid hack in session regenerate (Tobion) * bug #12341 [Kernel] ensure session is saved before sending response (Tobion) * bug #12329 [Routing] serialize the compiled route to speed things up (Tobion) * bug #12316 Break infinite loop while resolving aliases (chx) * bug #12313 [Security][listener] change priority of switchuser (aitboudad) * 2.3.21 (2014-10-24) * bug #11696 [Form] Fix #11694 - Enforce options value type check in some form types (kix) * bug #12209 [FrameworkBundle] Fixed ide links (hason) * bug #12208 Add missing argument (WouterJ) * bug #12197 [TwigBundle] do not pass a template reference to twig (Tobion) * bug #12196 [TwigBundle] show correct fallback exception template in debug mode (Tobion) * bug #12187 [CssSelector] don't raise warnings when exception is thrown (xabbuh) * bug #11998 [Intl] Integrated ICU data into Intl component #2 (webmozart) * bug #11920 [Intl] Integrated ICU data into Intl component #1 (webmozart) * 2.3.20 (2014-09-28) * bug #9453 [Form][DateTime] Propagate invalid_message & invalid_message_parameters to date & time (egeloen) * bug #11058 [Security] bug #10242 Missing checkPreAuth from RememberMeAuthenticationProvider (glutamatt) * bug #12004 [Form] Fixed ValidatorTypeGuesser to guess properties without constraints not to be required (webmozart) * bug #11904 Make twig ExceptionController conformed with ExceptionListener (megazoll) * bug #11924 [Form] Moved POST_MAX_SIZE validation from FormValidator to request handler (rpg600, webmozart) * bug #11079 Response::isNotModified returns true when If-Modified-Since is later than Last-Modified (skolodyazhnyy) * bug #11989 [Finder][Urgent] Remove asterisk and question mark from folder name in test to prevent windows file system issues. (Adam) * bug #11908 [Translation] [Config] Clear libxml errors after parsing xliff file (pulzarraider) * bug #11937 [HttpKernel] Make sure HttpCache is a trusted proxy (thewilkybarkid) * bug #11970 [Finder] Escape location for regex searches (ymc-dabe) * bug #11837 Use getPathname() instead of string casting to get BinaryFileReponse file path (nervo) * bug #11513 [Translation] made XliffFileDumper support CDATA sections. (hhamon) * bug #11907 [Intl] Improved bundle reader implementations (webmozart) * bug #11874 [Console] guarded against non-traversable aliases (thierrymarianne) * bug #11799 [YAML] fix handling of empty sequence items (xabbuh) * bug #11906 [Intl] Fixed a few bugs in TextBundleWriter (webmozart) * bug #11459 [Form][Validator] All index items after children are to be considered grand-children when resolving ViolationPath (Andrew Moore) * bug #11715 [Form] FormBuilder::getIterator() now deals with resolved children (issei-m) * bug #11892 [SwiftmailerBridge] Bump allowed versions of swiftmailer (ymc-dabe) * bug #11918 [DependencyInjection] remove `service` parameter type from XSD (xabbuh) * bug #11905 [Intl] Removed non-working $fallback argument from ArrayAccessibleResourceBundle (webmozart) * bug #11497 Use separated function to resolve command and related arguments (JJK801) * bug #11374 [DI] Added safeguards against invalid config in the YamlFileLoader (stof) * bug #11897 [FrameworkBundle] Remove invalid markup (flack) * bug #11860 [Security] Fix usage of unexistent method in DoctrineAclCache. (mauchede) * bug #11850 [YAML] properly mask escape sequences in quoted strings (xabbuh) * bug #11856 [FrameworkBundle] backport more error information from 2.6 to 2.3 (xabbuh) * bug #11843 [Yaml] improve error message when detecting unquoted asterisks (xabbuh) * 2.3.19 (2014-09-03) * security #11832 CVE-2014-6072 (fabpot) * security #11831 CVE-2014-5245 (stof) * security #11830 CVE-2014-4931 (aitboudad, Jérémy Derussé) * security #11829 CVE-2014-6061 (damz, fabpot) * security #11828 CVE-2014-5244 (nicolas-grekas, larowlan) * bug #10197 [FrameworkBundle] PhpExtractor bugfix and improvements (mtibben) * bug #11772 [Filesystem] Add FTP stream wrapper context option to enable overwrite (Damian Sromek) * bug #11788 [Yaml] fixed mapping keys containing a quoted # (hvt, fabpot) * bug #11160 [DoctrineBridge] Abstract Doctrine Subscribers with tags (merk) * bug #11768 [ClassLoader] Add a __call() method to XcacheClassLoader (tstoeckler) * bug #11726 [Filesystem Component] mkdir race condition fix #11626 (kcassam) * bug #11677 [YAML] resolve variables in inlined YAML (xabbuh) * bug #11639 [DependencyInjection] Fixed factory service not within the ServiceReferenceGraph. (boekkooi) * bug #11778 [Validator] Fixed wrong translations for Collection constraints (samicemalone) * bug #11756 [DependencyInjection] fix @return anno created by PhpDumper (jakubkulhan) * bug #11711 [DoctrineBridge] Fix empty parameter logging in the dbal logger (jakzal) * bug #11692 [DomCrawler] check for the correct field type (xabbuh) * bug #11672 [Routing] fix handling of nullable XML attributes (xabbuh) * bug #11624 [DomCrawler] fix the axes handling in a bc way (xabbuh) * bug #11676 [Form] Fixed #11675 ValueToDuplicatesTransformer accept "0" value (Nek-) * bug #11695 [Validators] Fixed failing tests requiring ICU 52.1 which are skipped otherwise (webmozart) * bug #11529 [WebProfilerBundle] Fixed double height of canvas (hason) * bug #11641 [WebProfilerBundle ] Fix toolbar vertical alignment (blaugueux) * bug #11559 [Validator] Convert objects to string in comparison validators (webmozart) * feature #11510 [HttpFoundation] MongoDbSessionHandler supports auto expiry via configurable expiry_field (catchamonkey) * bug #11408 [HttpFoundation] Update QUERY_STRING when overrideGlobals (yguedidi) * bug #11633 [FrameworkBundle] add missing attribute to XSD (xabbuh) * bug #11601 [Validator] Allow basic auth in url when using UrlValidator. (blaugueux) * bug #11609 [Console] fixed style creation when providing an unknown tag option (fabpot) * bug #10914 [HttpKernel] added an analyze of environment parameters for built-in server (mauchede) * bug #11598 [Finder] Shell escape and windows support (Gordon Franke, gimler) * bug #11499 [BrowserKit] Fixed relative redirects for ambiguous paths (pkruithof) * bug #11516 [BrowserKit] Fix browser kit redirect with ports (dakota) * bug #11545 [Bundle][FrameworkBundle] built-in server: exit when docroot does not exist (xabbuh) * bug #11560 Plural fix (1emming) * bug #11558 [DependencyInjection] Fixed missing 'factory-class' attribute in XmlDumper output (kerdany) * bug #11548 [Component][DomCrawler] fix axes handling in Crawler::filterXPath() (xabbuh) * bug #11422 [DependencyInjection] Self-referenced 'service_container' service breaks garbage collection (sun) * bug #11428 [Serializer] properly handle null data when denormalizing (xabbuh) * bug #10687 [Validator] Fixed string conversion in constraint violations (eagleoneraptor, webmozart) * bug #11475 [EventDispatcher] don't count empty listeners (xabbuh) * bug #11436 fix signal handling in wait() on calls to stop() (xabbuh, romainneutron) * bug #11469 [BrowserKit] Fixed server HTTP_HOST port uri conversion (bcremer, fabpot) * bug #11425 Fix issue described in #11421 (Ben, ben-rosio) * bug #11423 Pass a Scope instance instead of a scope name when cloning a container in the GrahpvizDumper (jakzal) * bug #11120 [Process] Reduce I/O load on Windows platform (romainneutron) * bug #11342 [Form] Check if IntlDateFormatter constructor returned a valid object before using it (romainneutron) * bug #11411 [Validator] Backported #11410 to 2.3: Object initializers are called only once per object (webmozart) * bug #11403 [Translator][FrameworkBundle] Added @ to the list of allowed chars in Translator (takeit) * bug #11381 [Process] Use correct test for empty string in UnixPipes (whs, romainneutron) * 2.3.18 (2014-07-15) * [Security] Forced validate of locales passed to the translator * feature #11367 [HttpFoundation] Fix to prevent magic bytes injection in JSONP responses... (CVE-2014-4671) (Andrew Moore) * bug #11386 Remove Spaceless Blocks from Twig Form Templates (chrisguitarguy) * bug #9719 [TwigBundle] fix configuration tree for paths (mdavis1982, cordoval) * bug #11244 [HttpFoundation] Remove body-related headers when sending the response, if body is empty (SimonSimCity) * 2.3.17 (2014-07-07) * bug #11238 [Translation] Added unescaping of ids in PoFileLoader (JustBlackBird) * bug #11194 [DomCrawler] Remove the query string and the anchor of the uri of a link (benja-M-1) * bug #11272 [Console] Make sure formatter is the same. (akimsko) * bug #11259 [Config] Fixed failed config schema loads due to libxml_disable_entity_loader usage (ccorliss) * bug #11234 [ClassLoader] fixed PHP warning on PHP 5.3 (fabpot) * bug #11179 [Process] Fix ExecutableFinder with open basedir (cs278) * bug #11242 [CssSelector] Refactored the CssSelector to remove the circular object graph (stof) * bug #11219 [DomCrawler] properly handle buttons with single and double quotes insid... (xabbuh) * bug #11220 [Components][Serializer] optional constructor arguments can be omitted during the denormalization process (xabbuh) * bug #11186 Added missing `break` statement (apfelbox) * bug #11169 [Console] Fixed notice in DialogHelper (florianv) * bug #11144 [HttpFoundation] Fixed Request::getPort returns incorrect value under IPv6 (kicken) * bug #10966 PHP Fatal error when getContainer method of ContainerAwareCommand has be... (kevinvergauwen) * bug #10981 [HttpFoundation] Fixed isSecure() check to be compliant with the docs (Jannik Zschiesche) * bug #11092 [HttpFoundation] Fix basic authentication in url with PHP-FPM (Kdecherf) * bug #10808 [DomCrawler] Empty select with attribute name="foo[]" bug fix (darles) * bug #11063 [HttpFoundation] fix switch statement (Tobion) * bug #11009 [HttpFoundation] smaller fixes for PdoSessionHandler (Tobion) * bug #11041 Remove undefined variable $e (skydiablo) * 2.3.16 (2014-05-31) * bug #11014 [Validator] Remove property and method targets from the optional and required constraints (jakzal) * bug #10983 [DomCrawler] Fixed charset detection in html5 meta charset tag (77web) * bug #10979 Make rootPath part of regex greedy (artursvonda) * bug #10995 [TwigBridge][Trans]set %count% only on transChoice from the current context. (aitboudad) * bug #10987 [DomCrawler] Fixed a forgotten case of complex XPath queries (stof) * 2.3.15 (2014-05-22) * reverted #10908 * 2.3.14 (2014-05-22) * bug #10849 [WIP][Finder] Fix wrong implementation on sortable callback comparator (ProPheT777) * bug #10929 [Process] Add validation on Process input (romainneutron) * bug #10958 [DomCrawler] Fixed filterXPath() chaining loosing the parent DOM nodes (stof, robbertkl) * bug #10953 [HttpKernel] fixed file uploads in functional tests without file selected (realmfoo) * bug #10937 [HttpKernel] Fix "absolute path" when we look to the cache directory (BenoitLeveque) * bug #10908 [HttpFoundation] implement session locking for PDO (Tobion) * bug #10894 [HttpKernel] removed absolute paths from the generated container (fabpot) * bug #10926 [DomCrawler] Fixed the initial state for options without value attribute (stof) * bug #10925 [DomCrawler] Fixed the handling of boolean attributes in ChoiceFormField (stof) * bug #10777 [Form] Automatically add step attribute to HTML5 time widgets to display seconds if needed (tucksaun) * bug #10909 [PropertyAccess] Fixed plurals for -ves words (csarrazi) * bug #10899 Explicitly define the encoding. (jakzal) * bug #10897 [Console] Fix a console test (jakzal) * bug #10896 [HttpKernel] Fixed cache behavior when TTL has expired and a default "global" TTL is defined (alquerci, fabpot) * bug #10841 [DomCrawler] Fixed image input case sensitive (geoffrey-brier) * bug #10714 [Console]Improve formatter for double-width character (denkiryokuhatsuden) * bug #10872 [Form] Fixed TrimListenerTest as of PHP 5.5 (webmozart) * bug #10762 [BrowserKit] Allow URLs that don't contain a path when creating a cookie from a string (thewilkybarkid) * bug #10863 [Security] Add check for supported attributes in AclVoter (artursvonda) * bug #10833 [TwigBridge][Transchoice] set %count% from the current context. (aitboudad) * bug #10820 [WebProfilerBundle] Fixed profiler seach/homepage with empty token (tucksaun) * bug #10815 Fixed issue #5427 (umpirsky) * bug #10817 [Debug] fix #10313: FlattenException not found (nicolas-grekas) * bug #10803 [Debug] fix ErrorHandlerTest when context is not an array (nicolas-grekas) * bug #10801 [Debug] ErrorHandler: remove $GLOBALS from context in PHP5.3 fix #10292 (nicolas-grekas) * bug #10797 [HttpFoundation] Allow File instance to be passed to BinaryFileResponse (anlutro) * bug #10643 [TwigBridge] Removed strict check when found variables inside a translation (goetas) * 2.3.13 (2014-04-27) * bug #10789 [Console] Fixed the rendering of exceptions on HHVM with a terminal width (stof) * bug #10773 [WebProfilerBundle ] Fixed an edge case on WDT loading (tucksaun) * bug #10763 [Process] Disable TTY mode on Windows platform (romainneutron) * bug #10772 [Finder] Fix ignoring of unreadable dirs in the RecursiveDirectoryIterator (jakzal) * bug #10757 [Process] Setting STDIN while running should not be possible (romainneutron) * bug #10749 Fixed incompatibility of x509 auth with nginx (alcaeus) * bug #10735 [Translation] [PluralizationRules] Little correction for case 'ar' (klyk50) * bug #10720 [HttpFoundation] Fix DbalSessionHandler (Tobion) * bug #10721 [HttpFoundation] status 201 is allowed to have a body (Tobion) * bug #10728 [Process] Fix #10681, process are failing on Windows Server 2003 (romainneutron) * bug #10733 [DomCrawler] Textarea value should default to empty string instead of null. (Berdir) * bug #10723 [Security] fix DBAL connection typehint (Tobion) * bug #10700 Fixes various inconsistencies in the code (fabpot) * bug #10697 [Translation] Make IcuDatFileLoader/IcuResFileLoader::load invalid resource compatible with HHVM. (idn2104) * bug #10652 [HttpFoundation] fix PDO session handler under high concurrency (Tobion) * bug #10669 [Profiler] Prevent throwing fatal errors when searching timestamps or invalid dates (stloyd) * bug #10670 [Templating] PhpEngine should propagate charset to its helpers (stloyd) * bug #10665 [DependencyInjection] Fix ticket #10663 - Added setCharset method call to PHP templating engine (koku) * bug #10654 Changed the typehint of the EsiFragmentRenderer to the interface (stof) * bug #10649 [BrowserKit] Fix #10641 : BrowserKit is broken when using ip as host (romainneutron) * 2.3.12 (2014-04-03) * bug #10586 Fixes URL validator to accept single part urls (merk) * bug #10591 [Form] Buttons are now disabled if their containing form is disabled (webmozart) * bug #10579 HHVM fixes (fabpot) * bug #10564 fixed the profiler when an uncalled listener throws an exception when instantiated (fabpot) * bug #10568 [Form] Fixed hashing of choice lists containing non-UTF-8 characters (webmozart) * bug #10536 Avoid levenshtein comparison when using ContainerBuilder. (catch56) * bug #10549 Fixed server values in BrowserKit (fabpot) * bug #10540 [HttpKernel] made parsing controllers more robust (fabpot) * bug #10545 [DependencyInjection] Fixed YamlFileLoader imports path (jrnickell) * bug #10523 [Debug] Check headers sent before sending PHP response (GromNaN) * bug #10275 [Validator] Fixed ACE domain checks on UrlValidator (#10031) (aeoris) * bug #10123 handle array root element (greg0ire) * bug #10532 Fixed regression when using Symfony on filesystems without chmod support (fabpot) * bug #10502 [HttpKernel] Fix #10437: Catch exceptions when reloading a no-cache request (romainneutron) * bug #10493 Fix libxml_use_internal_errors and libxml_disable_entity_loader usage (romainneutron) * bug #9784 [HttpFoundation] Removed ini check to make Uploadedfile work on Google App Engine (micheleorselli) * bug #10416 [Form] Allow options to be grouped by objects (felds) * bug #10410 [Form] Fix "Array was modified outside object" in ResizeFormListener. (Chekote) * bug #10494 [Validator] Minor fix in IBAN validator (sprain) * bug #10491 Fixed bug that incorrectly causes the "required" attribute to be omitted from select even though it contains the "multiple" attribute (fabpot) * bug #10479 [Process] Fix escaping on Windows (romainneutron) * bug #10480 [Process] Fixed fatal errors in getOutput and getErrorOutput when process was not started (romainneutron) * bug #10420 [Process] Make Process::start non-blocking on Windows platform (romainneutron) * bug #10455 [Process] Fix random failures in test suite on TravisCI (romainneutron) * bug #10448 [Process] Fix quoted arguments escaping (romainneutron) * bug #10444 [DomCrawler] Fixed incorrect value name conversion in getPhpValues() and getPhpFiles() (romainneutron) * bug #10423 [Config] XmlUtils::convertDomElementToArray does not handle '0' (bendavies) * bug #10153 [Process] Fixed data in pipe being truncated if not read before process termination (astephens25) * bug #10429 [Process] Fix #9160 : escaping an argument with a trailing backslash on windows fails (romainneutron) * bug #10412 [Process] Fix process status in TTY mode (romainneutron) * bug #10382 10158 get vary multiple (bbinkovitz) * bug #10251 [Form] Fixes empty file-inputs getting treated as extra field. (jenkoian) * bug #10351 [HttpKernel] fix stripComments() normalizing new-lines (sstok) * bug #10348 Update FileLoader to fix issue #10339 (msumme) * 2.3.11 (2014-02-27) * bug #10146 [WebProfilerBundle] fixed parsing Mongo DSN and added Test for it (malarzm) * bug #10299 [Finder] () is also a valid delimiter (WouterJ) * bug #10255 [FrameworkBundle] Fixed wrong redirect url if path contains some query parameters (pulzarraider) * bug #10285 Bypass sigchild detection if phpinfo is not available (Seldaek) * bug #10269 [Form] Revert "Fix "Array was modified outside object" in ResizeFormListener." (norzechowicz) * 2.3.10 (2014-02-12) * bug #10231 [Console] removed problematic regex (fabpot) * bug #10245 [DomCrawler] Added support for tags to be treated as links (shamess) * bug #10232 [Form] Fix "Array was modified outside object" in ResizeFormListener. (Chekote) * bug #10215 [Routing] reduced recursion in dumper (arnaud-lb) * bug #10207 [DomCrawler] Fixed filterXPath() chaining (robbertkl) * bug #10205 [DomCrawler] Fixed incorrect handling of image inputs (robbertkl) * bug #10191 [HttpKernel] fixed wrong reference in TraceableEventDispatcher (fabpot) * bug #10195 [Debug] Fixed recursion level incrementing in FlattenException::flattenArgs(). (sun) * bug #10151 [Form] Update DateTime objects only if the actual value has changed (peterrehm) * bug #10140 allow the TextAreaFormField to be used with valid/invalid HTML (dawehner) * bug #10131 added lines to exceptions for the trans and transchoice tags (fabpot) * bug #10119 [Validator] Minor fix in XmlFileLoader (florianv) * bug #10078 [BrowserKit] add non-standard port to HTTP_HOST server param (kbond) * bug #10091 [Translation] Update PluralizationRules.php (guilhermeblanco) * bug #10053 [Form] fixed allow render 0 numeric input value (dczech) * bug #10033 [HttpKernel] Bugfix - Logger Deprecation Notice (Rican7) * bug #10023 [FrameworkBundle] Thrown an HttpException instead returning a Response in RedirectController::redirectAction() (jakzal) * bug #9985 Prevent WDT from creating a session (mvrhov) * bug #10000 [Console] Fixed the compatibility with HHVM (stof) * bug #9979 [Doctrine Bridge][Validator] Fix for null values in assosiated properties when using UniqueEntityValidator (vpetrovych) * bug #9983 [TwigBridge] Update min. version of Twig (stloyd) * bug #9970 [CssSelector] fixed numeric attribute issue (jfsimon) * bug #9747 [DoctrineBridge] Fix: Add type detection. Needed by pdo_dblib (iamluc) * bug #9962 [Process] Fix #9861 : Revert TTY mode (romainneutron) * bug #9960 [Form] Update minimal requirement in composer.json (stloyd) * bug #9952 [Translator] Fix Empty translations with Qt files (vlefort) * bug #9948 [WebProfilerBundle] Fixed profiler toolbar icons for XHTML. (rafalwrzeszcz) * bug #9933 Propel1 exception message (jaugustin) * bug #9949 [BrowserKit] Throw exception on invalid cookie expiration timestamp (anlutro) * 2.3.9 (2014-01-05) * bug #9938 [Process] Add support SAPI cli-server (peter-gribanov) * bug #9940 [EventDispatcher] Fix hardcoded listenerTag name in error message (lemoinem) * bug #9908 [HttpFoundation] Throw proper exception when invalid data is passed to JsonResponse class (stloyd) * bug #9902 [Security] fixed pre/post authentication checks (fabpot) * bug #9899 [Filesystem | WCM] 9339 fix stat on url for filesystem copy (cordoval) * bug #9589 [DependencyInjection] Fixed #9020 - Added support for collections in service#parameters (lavoiesl) * bug #9889 [Console] fixed column width when using the Table helper with some decoration in cells (fabpot) * bug #9323 [DomCrawler]fix #9321 Crawler::addHtmlContent add gbk encoding support (bronze1man) * bug #8997 [Security] Fixed problem with losing ROLE_PREVIOUS_ADMIN role. (pawaclawczyk) * bug #9557 [DoctrineBridge] Fix for cache-key conflict when having a \Traversable as choices (DRvanR) * bug #9879 [Security] Fix ExceptionListener to catch correctly AccessDeniedException if is not first exception (fabpot) * bug #9885 [Dependencyinjection] Fixed handling of inlined references in the AnalyzeServiceReferencesPass (fabpot) * bug #9884 [DomCrawler] Fixed creating form objects from named form nodes (jakzal) * bug #9882 Add support for HHVM in the getting of the PHP executable (fabpot) * bug #9850 [Validator] Fixed IBAN validator with 0750447346 value (stewe) * bug #9865 [Validator] Fixes message value for objects (jongotlin) * bug #9441 [Form][DateTimeToArrayTransformer] Check for hour, minute & second validity (egeloen) * bug #9867 #9866 [Filesystem] Fixed mirror for symlinks (COil) * bug #9806 [Security] Fix parent serialization of user object (ddeboer) * bug #9834 [DependencyInjection] Fixed support for backslashes in service ids. (jakzal) * bug #9826 fix #9356 [Security] Logger should manipulate the user reloaded from provider (matthieuauger) * bug #9769 [BrowserKit] fixes #8311 CookieJar is totally ignorant of RFC 6265 edge cases (jzawadzki) * bug #9697 [Config] fix 5528 let ArrayNode::normalizeValue respect order of value array provided (cordoval) * bug #9701 [Config] fix #7243 allow 0 as arraynode name (cordoval) * bug #9795 [Form] Fixed issue in BaseDateTimeTransformer when invalid timezone cause Trans... (tyomo4ka) * bug #9714 [HttpFoundation] BinaryFileResponse should also return 416 or 200 on some range-requets (SimonSimCity) * bug #9601 [Routing] Remove usage of deprecated _scheme requirement (Danez) * bug #9489 [DependencyInjection] Add normalization to tag options (WouterJ) * bug #9135 [Form] [Validator] fix maxLength guesser (franek) * bug #9790 [Filesystem] Changed the mode for a target file in copy() to be write only (jakzal) * 2.3.8 (2013-12-16) * bug #9758 [Console] fixed TableHelper when cell value has new line (k-przybyszewski) * bug #9760 [Routing] Fix router matching pattern against multiple hosts (karolsojko) * bug #9674 [Form] rename validators.ua.xlf to validators.uk.xlf (craue) * bug #9722 [Validator]Fixed getting wrong msg when value is an object in Exception (aitboudad) * bug #9750 allow TraceableEventDispatcher to reuse event instance in nested events (evillemez) * bug #9718 [validator] throw an exception if isn't an instance of ConstraintValidatorInterface. (aitboudad) * bug #9716 Reset the box model to content-box in the web debug toolbar (stof) * bug #9711 [FrameworkBundle] Allowed "0" as a checkbox value in php templates (jakzal) * bug #9665 [Bridge/Doctrine] ORMQueryBuilderLoader - handled the scenario when no entity manager is passed with closure query builder (jakzal) * bug #9656 [DoctrineBridge] normalized class names in the ORM type guesser (fabpot) * bug #9647 use the correct class name to retrieve mapped class' metadata and reposi... (xabbuh) * bug #9648 [Debug] ensured that a fatal PHP error is actually fatal after being handled by our error handler (fabpot) * bug #9643 [WebProfilerBundle] Fixed js escaping in time.html.twig (hason) * bug #9641 [Debug] Avoid notice from being "eaten" by fatal error. (fabpot) * bug #9639 Modified guessDefaultEscapingStrategy to not escape txt templates (fabpot) * bug #9314 [Form] Fix DateType for 32bits computers. (WedgeSama) * bug #9443 [FrameworkBundle] Fixed the registration of validation.xml file when the form is disabled (hason) * bug #9625 [HttpFoundation] Do not return an empty session id if the session was closed (Taluu) * bug #9637 [Validator] Replaced inexistent interface (jakzal) * bug #9605 Adjusting CacheClear Warmup method to namespaced kernels (rdohms) * bug #9610 Container::camelize also takes backslashes into consideration (ondrejmirtes) * bug #9447 [BrowserKit] fixed protocol-relative url redirection (jong99) * bug #9535 No Entity Manager defined exception (armetiz) * bug #9485 [Acl] Fix for issue #9433 (guilro) * bug #9516 [AclProvider] Fix incorrect behavior when partial results returned from cache (superdav42) * bug #9352 [Intl] make currency bundle merge fallback locales when accessing data, ... (shieldo) * bug #9537 [FrameworkBundle] Fix mistake in translation's service definition. (phpmike) * bug #9367 [Process] Check if the pipe array is empty before calling stream_select() (jfposton) * bug #9211 [Form] Fixed memory leak in FormValidator (bschussek) * bug #9469 [Propel1] re-factor Propel1 ModelChoiceList (havvg) * 2.3.7 (2013-11-14) * bug #9499 Request::overrideGlobals() may call invalid ini value (denkiryokuhatsuden) * bug #9420 [Console][ProgressHelper] Fix ProgressHelper redraw when redrawFreq is greater than 1 (giosh94mhz) * bug #9212 [Validator] Force Luhn Validator to only work with strings (Richtermeister) * bug #9476 Fixed bug with lazy services (peterrehm) * bug #9431 [DependencyInjection] fixed YamlDumper did not make services private. (realityking) * bug #9416 fixed issue with clone now the children of the original form are preserved and the clone form is given new children (yjv) * bug #9412 [HttpFoundation] added content length header to BinaryFileResponse (kbond) * bug #9395 [HttpKernel] fixed memory limit display in MemoryDataCollector (hhamon) * bug #9388 [Form] Fixed: The "data" option is taken into account even if it is NULL (bschussek) * bug #9391 [Serializer] Fixed the error handling when decoding invalid XML to avoid a Warning (stof) * bug #9378 [DomCrawler] [HttpFoundation] Make `Content-Type` attributes identification case-insensitive (matthieuprat) * bug #9354 [Process] Fix #9343 : revert file handle usage on Windows platform (romainneutron) * bug #9334 [Form] Improved FormTypeCsrfExtension to use the type class as default intention if the form name is empty (bschussek) * bug #9333 [Form] Improved FormTypeCsrfExtension to use the type class as default intention if the form name is empty (bschussek) * bug #9338 [DoctrineBridge] Added type check to prevent calling clear() on arrays (bschussek) * bug #9328 [Form] Changed FormTypeCsrfExtension to use the form's name as default intention (bschussek) * bug #9327 [Form] Changed FormTypeCsrfExtension to use the form's name as default intention (bschussek) * bug #9308 [DoctrineBridge] Loosened CollectionToArrayTransformer::transform() to accept arrays (bschussek) * bug #9274 [Yaml] Fixed the escaping of strings starting with a dash when dumping (stof) * bug #9270 [Templating] Fix in ChainLoader.php (janschoenherr) * bug #9246 [Session] fixed wrong started state (tecbot) * 2.3.6 (2013-10-10) * [Security] limited the password length passed to encoders * bug #9259 [Process] Fix latest merge from 2.2 in 2.3 (romainneutron) * bug #9237 [FrameworkBundle] assets:install command should mirror .dotfiles (.htaccess) (FineWolf) * bug #9223 [Translator] PoFileDumper - PO headers (Padam87) * bug #9257 [Process] Fix 9182 : random failure on pipes tests (romainneutron) * bug #9222 [Bridge] [Propel1] Fixed guessed relations (ClementGautier) * bug #9214 [FramworkBundle] Check event listener services are not abstract (lyrixx) * bug #9207 [HttpKernel] Check for lock existence before unlinking (ollietb) * bug #9184 Fixed cache warmup of paths which contain back-slashes (fabpot) * bug #9192 [Form] remove MinCount and MaxCount constraints in ValidatorTypeGuesser (franek) * bug #9190 Fix: duplicate usage of Symfony\Component\HttpFoundation\Response (realsim) * bug #9188 [Form] add support for Length and Range constraint in ValidatorTypeGuesser (franek) * bug #8809 [Form] enforce correct timezone (Burgov) * bug #9169 Fixed client insulation when using the terminable event (fabpot) * bug #9154 Fix problem with Windows file links (backslash in JavaScript string) (fabpot) * bug #9153 [DependencyInjection] Prevented inlining of lazy loaded private service definitions (jakzal) * bug #9103 [HttpFoundation] Header `HTTP_X_FORWARDED_PROTO` can contain various values (stloyd) * 2.3.5 (2013-09-27) * 8980954: bugix: CookieJar returns cookies with domain "domain.com" for domain "foodomain.com" * bb59ac2: fixed HTML5 form attribute handling XPath query * 3108c71: [Locale] added support for the position argument to NumberFormatter::parse() * 0774c79: [Locale] added some more stubs for the number formatter * e5282e8: [DomCrawler]Crawler guess charset from html * 0e80d88: fixes RequestDataCollector bug, visible when used on Drupal8 * c8d0342: [Console] fixed exception rendering when nested styles * a47d663: [Console] fixed the formatter for single-char tags * c6c35b3: [Console] Escape exception message during the rendering of an exception * 04e730e: [DomCrawler] fixed HTML5 form attribute handling * 0e437c5: [BrowserKit] Fixed the handling of parameters when redirecting * d84df4c: [Process] Properly close pipes after a Process::stop call * b3ae29d: fixed bytes conversion when used on 32-bits systems * a273e79: [Form] Fixed: "required" attribute is not added to