Releases: jaytaph/RateLimitBundle
1.10.3: Deprecations symfony 4.2 TreeBuilder (#80)
* config 4.2 * fix composer OOM on travis * Add Symfony 4.2 to travis
Fixed setting calls in Redis/PhpRedis storage
Merge pull request #76 from pierniq/master Fixed setting calls in Redis/PhpRedis storage
Manual reset update
There are a few issues where some storage backends do not expire rate limits. Pre-1.7.0 versions relied on the storage backends to expire them so in some cases rate limiting did not function (not a very small issue considering this is a rate limiter).
This version manually calls the resetRate
method that will explicitly remove the given rate limit from a cache once it detects that the rate limit has expired. If the storage backend did not remove it, this now will happen.
Symfony 3.0 release
Updated the bundle for Symfony 3.0 support. It will be backwards compatible with Symfony 2.3, 2.7 and 2.8.
Note: the FOSOAuthServerBundle
does not support Symfony 3.0 yet (PR is underway), so you might get issues on conflicting dependencies when using this bundle. This will automatically be resolved in the next coming weeks when that bundle becomes 3.0 compatible as well.
Security fix
This release fixes a security issue where paths where not properly url decoded before checking. This means that someone could overcome the rate limit by using %2fmy%2furl
instead of /my/url
as they resulted in storing as different urls. Sam Van der Borght found this issue and supplied a PR for it.
Doctrine storage
Added a doctrine storage, so more storage engines can be easily implemented.
Exceptions
Exceptions can be thrown instead of returning directly a response. This makes it possible for other parts of your system to handle rate limiting exceptions (for instance, the kernel.exception handlers)