-
Notifications
You must be signed in to change notification settings - Fork 4
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Change priority of RequestValidationSubscriber to give more priority to the firewall listeners of Symfony's security bundle #86
Change priority of RequestValidationSubscriber to give more priority to the firewall listeners of Symfony's security bundle #86
Conversation
… body validation and application firewall
…plication firewall listener
…versions lower than 5.3
…rsions higher then 6.1
Code Coverage Report: Summary: Nijens\OpenapiBundle\Controller\CatchAllController |
This PR changes the priority of the
RequestValidationSubscriber
to give more priority to the firewall listeners of Symfony's security bundle.The change prevents possibly exposing API internals by prematurely validating the request body on authenticated endpoints.