diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 3fc98dc..390fb2a 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -22,8 +22,10 @@ jobs: steps: - name: Checkout repository uses: actions/checkout@v4 - - name: Configure GitHub token for Composer - run: composer config -g github-oauth.github.com ${{ secrets.GITHUB_TOKEN }} + - name: Configure GitHub token and Git ownership for Composer + run: | + git config --global --add safe.directory '*' + composer config -g github-oauth.github.com ${{ secrets.GITHUB_TOKEN }} # Dynamically update composer.json dependencies before running make install - name: "Restrict Doctrine ORM version" run: composer require "doctrine/orm:${{ matrix.orm }}" --no-update --no-interaction diff --git a/CHANGELOG.md b/CHANGELOG.md index 281f66d..4e3288a 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,9 @@ CHANGELOG for 1.x =================== +## v1.18.2 - (2026-06-12) +### Removed +- Monitoring route `/phpinfo` removed because of security concern + ## v1.18.1 - (2026-05-19) ### Added - Allow `doctrine/doctrine-fixtures-bundle` v4 diff --git a/src/Controller/MonitoringController.php b/src/Controller/MonitoringController.php index 3fd8128..23a5eb3 100644 --- a/src/Controller/MonitoringController.php +++ b/src/Controller/MonitoringController.php @@ -23,12 +23,6 @@ public function uptime(): Response ]); } - public function phpinfo(): void // phpcs:ignore - { - phpinfo(); // phpcs:ignore - exit; - } - public function simulateIniOverride(IniOverrideConfig $config): Response { $data = ['memory_limit_default' => $config->getCurrentMemoryLimit()]; diff --git a/src/Route/RouteLoader.php b/src/Route/RouteLoader.php index 0f4ec13..ca7224c 100644 --- a/src/Route/RouteLoader.php +++ b/src/Route/RouteLoader.php @@ -36,7 +36,7 @@ public function load(mixed $resource, ?string $type = null): RouteCollection // MDT the path ^/anonymous must have PUBLIC_ACCESS in the project security.yaml config for the probe route to be accessible without user new Route('/anonymous' . $routePathPrefix . 'uptime', ['_controller' => $controller . 'uptime']) ); - foreach (['phpinfo', 'simulateIniOverride', 'dateFormatting'] as $action) { + foreach (['simulateIniOverride', 'dateFormatting'] as $action) { $collection->add( $routeNamePrefix . u($action)->snake()->toString(), new Route($routePathPrefix . u($action)->snake()->replace('_', '-')->toString(), ['_controller' => $controller . $action])