This repository was archived by the owner on Feb 24, 2023. It is now read-only.
Add @ContentSafe
annotation for controller actions
#686
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
In Symfony 5.2 support was added for safe content negotiation via PR symfony/symfony#34847 and was explained via https://symfony.com/blog/new-in-symfony-5-1-the-safe-http-preference
This PR introduces the
@ContentSafe
annotation. The annotation automatically will get enabled whenResponse::setContentSafe
method exists, or by settingcontent_safe.annotations
totrue
in the configuration.Controller actions do not necessarily create the
Response
object themselves.Annotations like
@Template
can get used to do that.Without the
@ContentSafe
annotation the@Template
annotation can not get used anymore. With the@ContentSafe
annotation this will look like:Marking a
Response
withsetContentSafe
requires defining the response as variable.Without content safe:
With content safe: