Skip to content

[AssetMapper] Exclude dot files #52712

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Nov 25, 2023

Conversation

weaverryan
Copy link
Member

Q A
Branch? 6.4
Bug fix? yes - could possibly be considered a security fix
New feature? yes
Deprecations? no
Issues Fix #52697
License MIT

See #52697. The biggest question is: should we do this? Is it enough to say "Hey! When you map an assets directory, EVERYTHING is published publicly?". Or should we be on the safe side and exclude dot files by default.

Cheers!

@carsonbot carsonbot added this to the 6.4 milestone Nov 24, 2023
@weaverryan weaverryan changed the title [AssetMapper[ Exclude dot files [AssetMapper] Exclude dot files Nov 24, 2023
@smnandre
Copy link
Member

smnandre commented Nov 24, 2023

🥇 🧞‍♂️ 🙇‍♂️

You're amazing, thank you!

Copy link
Contributor

@94noni 94noni left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚀

@carsonbot carsonbot changed the title [AssetMapper] Exclude dot files Exclude dot files Nov 24, 2023
@carsonbot carsonbot changed the title Exclude dot files [AssetMapper] Exclude dot files Nov 24, 2023
@smnandre
Copy link
Member

For me it should 100% be the default behaviour, as the files do change their "nature" (losing the "dotfile" type on the way).

If it's not enabled per default, i'd like a commented (+explanation) setting in the configuration / recipe :)

Thanks again for the quick reaction @weaverryan

@fabpot
Copy link
Member

fabpot commented Nov 25, 2023

Thank you @weaverryan.

@fabpot fabpot merged commit 1386c95 into symfony:6.4 Nov 25, 2023
@weaverryan weaverryan deleted the asset-mapper-exclude-dot-files branch November 25, 2023 12:59
@keradus keradus mentioned this pull request Nov 25, 2023
fabpot added a commit that referenced this pull request Nov 26, 2023
This PR was merged into the 6.4 branch.

Discussion
----------

CS: typo fix

| Q             | A
| ------------- | ---
| Branch?       | 6.4
| Bug fix?      | no
| New feature?  | no <!-- please update src/**/CHANGELOG.md files -->
| Deprecations? | no <!-- please update UPGRADE-*.md and src/**/CHANGELOG.md files -->
| Issues        | Fix typo
| License       | MIT

appendix to #52712

Commits
-------

3c38467 CS: typo fix
This was referenced Nov 26, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

6 participants