@@ -7,6 +7,34 @@ in 2.0 minor versions.
7
7
To get the diff for a specific change, go to https://github.com/symfony/symfony/commit/XXX where XXX is the change hash
8
8
To get the diff between two versions, go to https://github.com/symfony/symfony/compare/v2.0.0...v2.0.1
9
9
10
+ * 2.0.17 (2012-08-28)
11
+
12
+ * 5bf4f92: fixed XML decoding attack vector through external entities
13
+ * 4e0c992: prevents injection of malicious doc types
14
+ * 47fe725: disabled network access when loading XML documents
15
+ * c896d71: refined previous commit
16
+ * a2a6cdc: prevents injection of malicious doc types
17
+ * 865461d: standardized the way we handle XML errors
18
+ * 352e8f5: Redirects are now absolute
19
+ * 9a355e9: [ HttpKernel] excluded a test on PHP 5.3.16, which is buggy (PHP, not Symfony ;))
20
+ * f694615: [ Process] fix ProcessTest::testProcessPipes hangs on Windows on branch 2.0
21
+ * 9beffff: [ HttpKernel] KernelTest::testGetRootDir fails on Windows for branch 2.0
22
+ * e49afde: Update monolog compatibility
23
+ * 832f8dd: Add support for Monolog 1.2.0
24
+ * c51fc10: avoid fatal error on invalid session
25
+ * 1a4a4ee: [ DependencyInjection] Fixed a frozen constructor of a container with no parameters
26
+ * b3cf36a: [ Config] Missing type argument passed to loader.
27
+ * 55a0b34: Fixes incorrect class used in src/Symfony/Bundle/FrameworkBundle/Console/Application.php
28
+ * a0709fc: [ DoctrineBridge] Fix log of non utf8 data
29
+ * 0b78fdf: Only call registerCommand on bundles that is an instance of Bundle
30
+ * 9e28593: fixed error on oracle db related to clob data.
31
+ * 9f4178b: [ Validator] Fixed: StaticMethodLoader does not try to invoke methods of interfaces anymore
32
+ * 2a3235a: [ Validator] Fixed group sequence support in the XML and YAML drivers
33
+ * 4f93d1a: [ Console] Use proc_open instead of exec to suppress errors when run on windows and stty is not present
34
+ * 16a980b: [ Validator] Fix bug order for constraint, property, getter and group-sequence-provider in validation.xml
35
+ * ed8823c: [ HttpFoundation] Allow setting an unknown status code without specifying a text
36
+ * e9d799c: [ Routing] fixed ApacheUrlMatcher and ApachMatcherDumper classes that did not take care of default parameters in urls.
37
+
10
38
* 2.0.16 (2012-07-11)
11
39
12
40
* 854daa8: [ Form] Fixed errors not to be added onto non-synchronized forms
0 commit comments