Commit 864c028
committed
minor #17309 [Security] Add caution on symfony cli web server exposing env vars on private network (94noni)
This PR was squashed before being merged into the 6.2 branch.
Discussion
----------
[Security] Add caution on symfony cli web server exposing env vars on private network
Hi,
One can understood that this web server is a great tool for development purposes but this addition should be added imho for knowledge :)
Context:
when checking some local data accessible on local network with coworker
we arrived to display a symfony cli served app profiler (obviously it is in `dev` env)
and in the profiler > request/response panel > server parameters > regular env vars => **thus exposing also symfony unrelated env vars which are included**
friendly ping `@wuchen90` ^^
Commits
-------
9c3023e [Security] Add caution on symfony cli web server exposing env vars on private network1 file changed
+7
-0
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
11 | 11 | | |
12 | 12 | | |
13 | 13 | | |
| 14 | + | |
| 15 | + | |
| 16 | + | |
| 17 | + | |
| 18 | + | |
| 19 | + | |
| 20 | + | |
14 | 21 | | |
15 | 22 | | |
16 | 23 | | |
| |||
0 commit comments