Skip to content

security release

Choose a tag to compare

View all tags
@lsmith77 lsmith77 released this 17 Jul 19:57
1.4.1
e3a28eb

When working with JSONP, be aware of CVE-2014-4671 (full explanation can be found here: Abusing JSONP with Rosetta Flash). You SHOULD use NelmioSecurityBundle and disable the content type sniffing for script resources.

Assets 2
Loading