You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
minor #17309 [Security] Add caution on symfony cli web server exposing env vars on private network (94noni)
This PR was squashed before being merged into the 6.2 branch.
Discussion
----------
[Security] Add caution on symfony cli web server exposing env vars on private network
Hi,
One can understood that this web server is a great tool for development purposes but this addition should be added imho for knowledge :)
Context:
when checking some local data accessible on local network with coworker
we arrived to display a symfony cli served app profiler (obviously it is in `dev` env)
and in the profiler > request/response panel > server parameters > regular env vars => **thus exposing also symfony unrelated env vars which are included**
friendly ping `@wuchen90` ^^
Commits
-------
9c3023e [Security] Add caution on symfony cli web server exposing env vars on private network
0 commit comments