Sounds almost the best for me ; just check there is no '../a.php' as the last part ; as it could lead to security failure (if the developper didn't do it himself) : 'HelloBundle:Hello:../../config.yml.php' And config.yml is printed without check (don't know the directory structure of Symfony2 ; I will look at it when it will have less changes per month)
So, I believe it's the best proposal in this thread :) Le 27/09/2010 11:23, Tim Nagel a écrit : > Sounds good. > > On Sat, Sep 25, 2010 at 15:43, Fabien Potencier > <[email protected] > <mailto:[email protected]>> wrote: > > > We can probably find a better naming convention. What about this: > > HelloBundle:Hello:index.php > HelloBundle:Hello:index.twig > > HelloBundle:Hello:index.xml.php > HelloBundle:Hello:index.xml.twig > > That way, when you are using the filesystem loader (and this is the case > 99% of the time), the last part is just the file name. > > What do you think? > > Fabien > > -- > If you want to report a vulnerability issue on symfony, please send it to > security at symfony-project.com > > You received this message because you are subscribed to the Google > Groups "symfony developers" group. > To post to this group, send email to [email protected] > To unsubscribe from this group, send email to > [email protected] > For more options, visit this group at > http://groups.google.com/group/symfony-devs?hl=en
signature.asc
Description: OpenPGP digital signature
