Skip to content

Issues: nelmio/NelmioSecurityBundle

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

29 Open 87 Closed
29 Open 87 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Nonce not possible to use
#365 opened Dec 4, 2024 by Mecanik
1
Can't seem to enable/disable CSP with environment variable
#362 opened Nov 13, 2024 by pauljura
Evaluate/updatePolicyManager
#358 opened Jul 8, 2024 by martijnc
1
Add mechanism to modify directives during or after request handling
#347 opened Jun 1, 2024 by martijnc
Unexpecting appearance of unsafe-inline on CSP
#346 opened May 29, 2024 by spyridonas
4
Service dependency injection for controller action: Getting CSP nonce in controller
#345 opened May 18, 2024 by Adambean
7
CSP interferes with var-dumper
#339 opened Mar 5, 2024 by pauljura
1
When script-src is set to strict-dynamic, 2 nonces are listed in CSP header
#336 opened Feb 20, 2024 by eliseeman
2
DirectiveSet::canNotBeFallbackedByDefault(): Argument #2 ($value) must be of type string, bool given
#325 opened Jul 6, 2023 by bartosz-zolynski
Update the default hashing algorithm used in signed cookies
#324 opened Apr 27, 2023 by javiereguiluz
Reusing nonce for Turbo Drive integration
#321 opened Feb 13, 2023 by florimondmanca
1
Issue with CSP config
#317 opened Oct 4, 2022 by yellow1912
2
cspscript for encore_entry_script_tags and cspstyle for encore_entry_link_tags
#314 opened Aug 30, 2022 by thomas2411
4
Incompatible with Symfony's clearCookie() strategy
#313 opened Jul 29, 2022 by johnpez
1
1
Problem with latest Symfony update and signed_cookie feature
#312 opened Jun 3, 2022 by Flo-JB
1
5
Ability to override (and disable) hash
#243 opened Sep 8, 2021 by drzraf
3
Support Permissions-policy header
#240 opened May 1, 2021 by nicolas-grekas
3
Support for new Cross-origin headers
#239 opened Mar 15, 2021 by stof
[Feature Contribution] Path Based configuration
#234 opened Aug 11, 2020 by henrym2
4
[Feature Contribution] Extending CSP to include Trusted-Types headers
#233 opened Aug 11, 2020 by henrym2
3
[Feature request] Per-page CSP configuration
#206 opened Jun 7, 2019 by stof
1
2
New script src directives
#200 opened Apr 3, 2019 by ooOsH
1
You have requested a non-existent service "nelmio_security.csp_reporter_controller" when csp is disabled
#196 opened Mar 7, 2019 by spackmat
Support for the Feature-Policy header
#181 opened Jul 16, 2018 by stof
1
Headers not sent when using {% flush %}
#178 opened Jun 14, 2018 by GenieTim
ProTip! What’s not been updated in a month: updated:<2024-11-30.