Rickrolls people trying to break your site.

Overview

Laravel RickRoll

CI License Last Version

Rickrolls people trying to break your site. This package is inspired by Liam Hammett's tweet.

Getting started

You can install the package via composer, if you don't have composer installed, you can download it here:

composer require felixdorn/laravel-rickroll

Or by adding a requirement in your composer.json :

{
    "require": {
        "felixdorn/laravel-rickroll": "dev-master"
    }
}

We need your knowledge!

Do you know any well-known url that "hackers" use to gather information/secrets ? Add these here, thanks!

Usage

On your routes/web.php just add this single line, and we'll handle the rest for you!

use Felix\Rickroll\Facades\RickRoll;

RickRoll::routes();

Redirecting to a custom URL

use Felix\Rickroll\Facades\RickRoll;

RickRoll::routes()->redirectsTo('https://mycustom.url');

Remove all URLs

use Felix\Rickroll\Facades\RickRoll;

RickRoll::routes()->clear();

Adding a URL

use Felix\Rickroll\Facades\RickRoll;

RickRoll::routes()->push('/rickroll')
    ->push('/rickroll/{id}', [
        'id' => '[0-9]+'
    ]);

Helper

There is a rickroll function available if you want to rickroll someone in one of your controllers.

rickroll('https://my-custom.url');

You don't need to return anything, it works just like an abort.

Events

We're dispatching an event with the current request when someone is rick-rolled. Just listen for Felix\RickRoll\Events\RickRolled in your EventServiceProvider .

Testing

composer test

Contributing

Please see CONTRIBUTING for details.

Security

If you discover any security related issues, please email [email protected] instead of using the issue tracker.

Credits

License

The MIT License (MIT). Please see License File for more information.

Comments
  • compatibility issues with laravel 8

    compatibility issues with laravel 8

    I am currently trying to upgrade to laravel 8. So I updated my composer.json file to the new version. Composer gave me the following error when running composer update:

    Loading composer repositories with package information                                                                                                                                                                                         
    Updating dependencies (including require-dev)                                                                                                                                                                                                  
    Your requirements could not be resolved to an installable set of packages.                                                                                                                                                                     
                                                                                                                                                                                                                                                   
      Problem 1                                                                                                                                                                                                                                    
        - Conclusion: don't install laravel/framework v8.11.2                                                                                                                                                                                      
        - Conclusion: don't install laravel/framework v8.11.1                                                                                                                                                                                      
        - Conclusion: don't install laravel/framework v8.11.0                                                                                                                                                                                      
        - Conclusion: don't install laravel/framework v8.10.0                                                                                                                                                                                      
        - Conclusion: don't install laravel/framework v8.9.0                                                                                                                                                                                       
        - Conclusion: don't install laravel/framework v8.8.0                                                                                                                                                                                       
        - Conclusion: don't install laravel/framework v8.7.1                                                                                                                                                                                       
        - Conclusion: don't install laravel/framework v8.7.0                                                                                                                                                                                       
        - Conclusion: don't install laravel/framework v8.6.0                                                                                                                                                                                       
        - Conclusion: don't install laravel/framework v8.5.0                                                                                                                                                                                       
        - Conclusion: don't install laravel/framework v8.4.0                                                                                                                                                                                       
        - Conclusion: don't install laravel/framework v8.3.0                                                                                                                                                                                       
        - Conclusion: don't install laravel/framework v8.2.0                                                                                                                                                                                       
        - Conclusion: don't install laravel/framework v8.1.0                                                                                                                                                                                       
        - Conclusion: don't install laravel/framework v8.0.4                                                                                                                                                                                       
        - Conclusion: don't install laravel/framework v8.0.3                                                                                                                                                                                       
        - Conclusion: don't install laravel/framework v8.0.2                                                                                                                                                                                       
        - Installation request for felixdorn/laravel-rickroll ^1.0 -> satisfiable by felixdorn/laravel-rickroll[1.0.0].                                                                                                                            
        - Conclusion: don't install laravel/framework v8.0.1                                                                                                                                                                                       
        - Conclusion: don't install laravel/framework v8.0.0                                                                                                                                                                                       
        - felixdorn/laravel-rickroll 1.0.0 requires illuminate/support ^7 -> satisfiable by laravel/framework[v7.28.4, 7.x-dev], illuminate/support[7.x-dev, v7.0.0, v7.0.1, v7.0.2, v7.0.3, v7.0.4, v7.0.5, v7.0.6, v7.0.7, v7.0.8, v7.1.0, v7.1.1
    , v7.1.2, v7.1.3, v7.10.0, v7.10.1, v7.10.2, v7.10.3, v7.11.0, v7.12.0, v7.13.0, v7.14.0, v7.14.1, v7.15.0, v7.16.0, v7.16.1, v7.17.0, v7.17.1, v7.17.2, v7.18.0, v7.19.0, v7.19.1, v7.2.0, v7.2.1, v7.2.2, v7.20.0, v7.21.0, v7.22.0, v7.22.1,
     v7.22.2, v7.22.3, v7.22.4, v7.23.0, v7.23.1, v7.23.2, v7.24.0, v7.25.0, v7.26.0, v7.26.1, v7.27.0, v7.28.0, v7.28.1, v7.28.2, v7.28.3, v7.28.4, v7.3.0, v7.4.0, v7.5.0, v7.5.1, v7.5.2, v7.6.0, v7.6.1, v7.6.2, v7.7.0, v7.7.1, v7.8.0, v7.8.1
    , v7.9.0, v7.9.1, v7.9.2].                                                                                                                                                                                                                     
    

    I am using Windows 10, PHP 7.4.0, Composer 1.10.16

    I have rerun this command multiple times, but the error was always the same.

    opened by C2H6-383 3
  • Bump laravel/framework from 7.11.0 to 7.30.4

    Bump laravel/framework from 7.11.0 to 7.30.4

    Bumps laravel/framework from 7.11.0 to 7.30.4.

    Release notes

    Sourced from laravel/framework's releases.

    v7.30.4

    Fixed

    • Fixed empty html mail (#35941)
    • Fixed type error in Illuminate\Http\Concerns\InteractsWithContentTypes::isJson() (#35956)
    • Limit expected bindings (#35972, 006873d)

    v7.30.3

    v7.30.3 (2021-01-15)

    v7.30.2

    v7.30.2 (2021-01-13)

    Added

    • Added strings to DetectsLostConnections (#35752)

    Fixed

    • Fixed error from missing null check on PHP 8 (#35797)
    • Limit expected bindings (#35865)

    Changed

    • Retry connection if DNS lookup fails (#35790)

    v7.30.1

    v7.30.1 (2020-12-22)

    Fixed

    • Backport for fix issue with polymorphic morphMaps with literal 0 (#35487)
    • Fixed mime validation for jpeg files (#35518)
    • Fixed Illuminate\Validation\Concerns\ValidatesAttributes::validateJson() for PHP8 (#35646)
    • Catch DecryptException with invalid X-XSRF-TOKEN in Illuminate\Foundation\Http\Middleware\VerifyCsrfToken (#35671)

    v7.30.0

    v7.30.0 (2020-12-01)

    Fixed

    • Turn the eloquent collection into a base collection if mapWithKeys loses models (#35129)
    • Fixed pivot restoration (#35218)
    • Fixing BroadcastException message in PusherBroadcaster@broadcast (#35290)
    • Fixed generic DetectsLostConnection string (#35323)
    • Backport Redis context option (#35370)
    • Fixed validating image/jpeg images after Symfony/Mime update (#35419)

    Changed

    • Updated aws/aws-sdk-php suggest to ^3.155 (#35267)

    v7.29.3

    v7.29.3 (2020-11-03)

    ... (truncated)

    Commits

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
    • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
    • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
    • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

    You can disable automated security fix PRs for this repo from the Security Alerts page.

    dependencies 
    opened by dependabot[bot] 1
  • Bump laravel/framework from 7.11.0 to 7.30.3

    Bump laravel/framework from 7.11.0 to 7.30.3

    Bumps laravel/framework from 7.11.0 to 7.30.3.

    Release notes

    Sourced from laravel/framework's releases.

    v7.30.3

    v7.30.3 (2021-01-15)

    v7.30.2

    v7.30.2 (2021-01-13)

    Added

    • Added strings to DetectsLostConnections (#35752)

    Fixed

    • Fixed error from missing null check on PHP 8 (#35797)
    • Limit expected bindings (#35865)

    Changed

    • Retry connection if DNS lookup fails (#35790)

    v7.30.1

    v7.30.1 (2020-12-22)

    Fixed

    • Backport for fix issue with polymorphic morphMaps with literal 0 (#35487)
    • Fixed mime validation for jpeg files (#35518)
    • Fixed Illuminate\Validation\Concerns\ValidatesAttributes::validateJson() for PHP8 (#35646)
    • Catch DecryptException with invalid X-XSRF-TOKEN in Illuminate\Foundation\Http\Middleware\VerifyCsrfToken (#35671)

    v7.30.0

    v7.30.0 (2020-12-01)

    Fixed

    • Turn the eloquent collection into a base collection if mapWithKeys loses models (#35129)
    • Fixed pivot restoration (#35218)
    • Fixing BroadcastException message in PusherBroadcaster@broadcast (#35290)
    • Fixed generic DetectsLostConnection string (#35323)
    • Backport Redis context option (#35370)
    • Fixed validating image/jpeg images after Symfony/Mime update (#35419)

    Changed

    • Updated aws/aws-sdk-php suggest to ^3.155 (#35267)

    v7.29.3

    v7.29.3 (2020-11-03)

    Fixed

    • Added php 8 support for Illuminate Testing 7.x (#35045)

    v7.29.2

    v7.29.2 (2020-10-29)

    ... (truncated)

    Commits

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
    • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
    • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
    • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

    You can disable automated security fix PRs for this repo from the Security Alerts page.

    dependencies 
    opened by dependabot[bot] 1
  • laravel 8 combatibility

    laravel 8 combatibility

    I have created a fix for #7. Could you please check if it works for you (it works on a local test install of laravel 8) and merge this pr?

    Thank you very much.

    opened by C2H6-383 1
  • Bump composer/composer from 2.0.13 to 2.1.9

    Bump composer/composer from 2.0.13 to 2.1.9

    Bumps composer/composer from 2.0.13 to 2.1.9.

    Release notes

    Sourced from composer/composer's releases.

    2.1.9

    • Security: Fixed command injection vulnerability on Windows (GHSA-frqg-7g38-6gcf / CVE-2021-41116)
    • Fixed classmap parsing with a new class parser which does not rely on regexes anymore (#10107)
    • Fixed inline git credentials showing up in output in some conditions (#10115)
    • Fixed support for running updates while offline as long as the cache contains enough information (#10116)
    • Fixed show --all foo/bar which as of 2.0.0 was not showing all versions anymore but only the installed one (#10095)
    • Fixed VCS repos ignoring some versions silently when the API rate limit is reached (#10132)
    • Fixed CA bundle to remove the expired Let's Encrypt root CA

    2.1.8

    • Fixed regression in 2.1.7 when parsing classmaps in files containing invalid Unicode (#10102)

    2.1.7

    • Added many type annotations internally, which may have an effect on CI/static analysis for people using Composer as a dependency. This work will continue in following releases
    • Fixed regression in 2.1.6 when parsing classmaps with empty heredocs (#10067)
    • Fixed regression in 2.1.6 where list command was not showing plugin commands (#10075)
    • Fixed issue handling package updates where the package type changed (#10076)
    • Fixed docker being detected as WSL when run inside WSL (#10094)

    2.1.6

    • Updated internal PHAR signatures to be SHA512 instead of SHA1
    • Fixed uncaught exception handler regression (#10022)
    • Fixed more PHP 8.1 deprecation warnings (#10036, #10038, #10061)
    • Fixed corrupted zips in the cache from blocking installs until a cache clear, the bad archives are now deleted automatically on first failure (#10028)
    • Fixed URL sanitizer handling of new github tokens (#10048)
    • Fixed issue finding classes with very long heredocs in classmap autoload (#10050)
    • Fixed proc_open being required for simple installs from zip, as well as diagnose (#9253)
    • Fixed path repository bug causing symlinks to be left behind after a package is uninstalled (#10023)
    • Fixed issue in 7-zip support on windows with certain archives (#10058)
    • Fixed bootstrapping process to avoid loading the composer.json and plugins until necessary, speeding things up slightly (#10064)
    • Fixed lib-openssl detection on FreeBSD (#10046)
    • Fixed support for ircs:// protocol for support.irc composer.json entries

    2.1.5

    • Fixed create-project creating a php: directory in the directory it was executed in (#10020, #10021)
    • Fixed curl downloader to respect default_socket_timeout if it is bigger than our default 300s (#10018)

    2.1.4

    • Fixed PHP 8.1 deprecation warnings (#10008)
    • Fixed support for working within UNC/WSL paths on Windows (#9993)
    • Fixed 7-zip support to also be looked up on Linux/macOS as 7z or 7zz (#9951)
    • Fixed repositories' only/exclude properties to avoid matching names as sub-strings of full package names (#10001)
    • Fixed open_basedir regression from #9855
    • Fixed schema errors being reported incorrectly in some conditions (#9986)
    • Fixed archive command not working with async archive extraction
    • Fixed init command being able to generate an invalid composer.json (#9986)

    2.1.3

    • Add "symlink" option for "bin-compat" config to force symlinking even on WSL/Windows (#9959)
    • Fixed source binaries not being made executable when symlinks cannot be used (#9961)

    ... (truncated)

    Changelog

    Sourced from composer/composer's changelog.

    [2.1.9] 2021-10-05

    • Security: Fixed command injection vulnerability on Windows (GHSA-frqg-7g38-6gcf / CVE-2021-41116)
    • Fixed classmap parsing with a new class parser which does not rely on regexes anymore (#10107)
    • Fixed inline git credentials showing up in output in some conditions (#10115)
    • Fixed support for running updates while offline as long as the cache contains enough information (#10116)
    • Fixed show --all foo/bar which as of 2.0.0 was not showing all versions anymore but only the installed one (#10095)
    • Fixed VCS repos ignoring some versions silently when the API rate limit is reached (#10132)
    • Fixed CA bundle to remove the expired Let's Encrypt root CA

    [2.1.8] 2021-09-15

    • Fixed regression in 2.1.7 when parsing classmaps in files containing invalid Unicode (#10102)

    [2.1.7] 2021-09-14

    • Added many type annotations internally, which may have an effect on CI/static analysis for people using Composer as a dependency. This work will continue in following releases
    • Fixed regression in 2.1.6 when parsing classmaps with empty heredocs (#10067)
    • Fixed regression in 2.1.6 where list command was not showing plugin commands (#10075)
    • Fixed issue handling package updates where the package type changed (#10076)
    • Fixed docker being detected as WSL when run inside WSL (#10094)

    [2.1.6] 2021-08-19

    • Updated internal PHAR signatures to be SHA512 instead of SHA1
    • Fixed uncaught exception handler regression (#10022)
    • Fixed more PHP 8.1 deprecation warnings (#10036, #10038, #10061)
    • Fixed corrupted zips in the cache from blocking installs until a cache clear, the bad archives are now deleted automatically on first failure (#10028)
    • Fixed URL sanitizer handling of new github tokens (#10048)
    • Fixed issue finding classes with very long heredocs in classmap autoload (#10050)
    • Fixed proc_open being required for simple installs from zip, as well as diagnose (#9253)
    • Fixed path repository bug causing symlinks to be left behind after a package is uninstalled (#10023)
    • Fixed issue in 7-zip support on windows with certain archives (#10058)
    • Fixed bootstrapping process to avoid loading the composer.json and plugins until necessary, speeding things up slightly (#10064)
    • Fixed lib-openssl detection on FreeBSD (#10046)
    • Fixed support for ircs:// protocol for support.irc composer.json entries

    [2.1.5] 2021-07-23

    • Fixed create-project creating a php: directory in the directory it was executed in (#10020, #10021)
    • Fixed curl downloader to respect default_socket_timeout if it is bigger than our default 300s (#10018)

    [2.1.4] 2021-07-22

    • Fixed PHP 8.1 deprecation warnings (#10008)
    • Fixed support for working within UNC/WSL paths on Windows (#9993)
    • Fixed 7-zip support to also be looked up on Linux/macOS as 7z or 7zz (#9951)
    • Fixed repositories' only/exclude properties to avoid matching names as sub-strings of full package names (#10001)
    • Fixed open_basedir regression from #9855
    • Fixed schema errors being reported incorrectly in some conditions (#9986)

    ... (truncated)

    Commits
    • e558c88 Release 2.1.9
    • cb1e248 Fix type annotation
    • 2f3273b Fix changelog
    • 18e2497 Merge branch '1.10'
    • b67ceb8 Prepare changelog
    • ca5e2f8 Fix escaping issues on Windows which could lead to command injection, fixes G...
    • b3eebeb Merge pull request from GHSA-frqg-7g38-6gcf
    • 532c6e7 Fix show --all showing only the installed version if the package is installed...
    • a7963b7 Fix ComposerRepository handling of offline state to allow resolution as long ...
    • edccad4 VcsRepository: do not continue when receiving 429 rate limit exception (#10132)
    • Additional commits viewable in compare view

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
    • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
    • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
    • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

    You can disable automated security fix PRs for this repo from the Security Alerts page.

    dependencies 
    opened by dependabot[bot] 0
  • Bump league/flysystem from 1.1.3 to 1.1.4

    Bump league/flysystem from 1.1.3 to 1.1.4

    Bumps league/flysystem from 1.1.3 to 1.1.4.

    Commits

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
    • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
    • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
    • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

    You can disable automated security fix PRs for this repo from the Security Alerts page.

    dependencies 
    opened by dependabot[bot] 0
  • Bump composer/composer from 1.10.6 to 2.0.13

    Bump composer/composer from 1.10.6 to 2.0.13

    Bumps composer/composer from 1.10.6 to 2.0.13.

    Release notes

    Sourced from composer/composer's releases.

    2.0.13

    • Security: Fixed command injection vulnerability in HgDriver/HgDownloader and hardened other VCS drivers and downloaders (GHSA-h5h8-pc6h-jvvx / CVE-2021-29472)
    • Fixed install step at the end of the init command to take new dependencies into account correctly
    • Fixed update --lock listing updates which were not really happening (#9812)
    • Fixed support for --no-dev combined with --locked in outdated and show commands (#9788)

    2.0.12

    • Fixed support for new GitHub OAuth token format (#9757)
    • Fixed support for Vagrant/VirtualBox filesystem slowness by adding short sleeps in some places (#9627)
    • Fixed unclear error reporting when a package is in the lock file but not in the remote repositories (#9750)
    • Fixed processes silently ignoring the CWD when it does not exist
    • Fixed new Windows bin handling to avoid proxying phar files (#9742)
    • Fixed issue extracting archives into paths that already exist, fixing problems with some custom installers (composer/installers#479)
    • Fixed support for branch names starting with master/trunk/default (#9739)
    • Fixed self-update to preserve phar file permissions on Windows (#9733)
    • Fixed detection of hg version when localized (#9753)
    • Fixed git execution failures to also include the stdout output (#9720)

    2.0.11

    • Reverted "Fixed runtime autoloader registration (for plugins and script handlers) to prefer the project dependencies over the bundled Composer ones" as it caused more problems than expected

    2.0.10

    • Added COMPOSER_MAX_PARALLEL_HTTP env var to let people set a lower amount of parallel requests if needed
    • Fixed autoloader registration when plugins are loaded, which may impact plugins relying on this bug (if you use symfony/flex make sure you upgrade it to 1.12.2+ to fix dump-env issues)
    • Fixed exec command suppressing output in some circumstances
    • Fixed Windows/cmd.exe support for script handlers defined as path/to/foo, which are now rewritten internally to path\to\foo when needed
    • Fixed bin handling on Windows for PHP scripts, to more closely match symlinks and allow @php vendor/bin/foo to work cross-platform
    • Fixed Git for Windows/Git Bash not being detected correctly as an interactive shell (regression since 2.0.7)
    • Fixed regression handling some private Bitbucket repository clones
    • Fixed Ctrl-C/SIGINT handling during downloads to correctly abort as soon as possible
    • Fixed runtime autoloader registration (for plugins and script handlers) to prefer the project dependencies over the bundled Composer ones
    • Fixed numeric default branches being aliased as 9999999-dev internally. This alias now only applies to default branches being non-numeric (e.g. dev-main)
    • Fixed support for older lib-sodium versions
    • Fixed various minor issues

    2.0.9

    • Added warning if the curl extension is not enabled as it significantly degrades performance
    • Fixed InstalledVersions to report all packages when several vendor dirs are present in the same runtime
    • Fixed download speed when downloading large files
    • Fixed archive and path repo copies mishandling some .gitignore paths
    • Fixed root package classes not being available to the plugins/scripts during the initial install
    • Fixed cache writes to be atomic and better support multiple Composer processes running in parallel
    • Fixed preg jit issues when config or require modifies large composer.json files
    • Fixed compatibility with envs having open_basedir restrictions
    • Fixed exclude-from-classmap causing regex issues when having too many paths
    • Fixed compatibility issue with Symfony 4/5
    • Several small performance and debug output improvements

    2.0.8

    ... (truncated)

    Changelog

    Sourced from composer/composer's changelog.

    [2.0.13] 2021-04-27

    • Security: Fixed command injection vulnerability in HgDriver/HgDownloader and hardened other VCS drivers and downloaders (GHSA-h5h8-pc6h-jvvx / CVE-2021-29472)
    • Fixed install step at the end of the init command to take new dependencies into account correctly
    • Fixed update --lock listing updates which were not really happening (#9812)
    • Fixed support for --no-dev combined with --locked in outdated and show commands (#9788)

    [2.0.12] 2021-04-01

    • Fixed support for new GitHub OAuth token format (#9757)
    • Fixed support for Vagrant/VirtualBox filesystem slowness by adding short sleeps in some places (#9627)
    • Fixed unclear error reporting when a package is in the lock file but not in the remote repositories (#9750)
    • Fixed processes silently ignoring the CWD when it does not exist
    • Fixed new Windows bin handling to avoid proxying phar files (#9742)
    • Fixed issue extracting archives into paths that already exist, fixing problems with some custom installers (composer/installers#479)
    • Fixed support for branch names starting with master/trunk/default (#9739)
    • Fixed self-update to preserve phar file permissions on Windows (#9733)
    • Fixed detection of hg version when localized (#9753)
    • Fixed git execution failures to also include the stdout output (#9720)

    [2.0.11] 2021-02-24

    • Reverted "Fixed runtime autoloader registration (for plugins and script handlers) to prefer the project dependencies over the bundled Composer ones" as it caused more problems than expected

    [2.0.10] 2021-02-23

    • Added COMPOSER_MAX_PARALLEL_HTTP to let people set a lower amount of parallel requests if needed
    • Fixed autoloader registration when plugins are loaded, which may impact plugins relying on this bug (if you use symfony/flex make sure you upgrade it to 1.12.2+ to fix dump-env issues)
    • Fixed exec command suppressing output in some circumstances
    • Fixed Windows/cmd.exe support for script handlers defined as path/to/foo, which are now rewritten internally to path\to\foo when needed
    • Fixed bin handling on Windows for PHP scripts, to more closely match symlinks and allow @php vendor/bin/foo to work cross-platform
    • Fixed Git for Windows/Git Bash not being detected correctly as an interactive shell (regression since 2.0.7)
    • Fixed regression handling some private Bitbucket repository clones
    • Fixed Ctrl-C/SIGINT handling during downloads to correctly abort as soon as possible
    • Fixed runtime autoloader registration (for plugins and script handlers) to prefer the project dependencies over the bundled Composer ones
    • Fixed numeric default branches being aliased as 9999999-dev internally. This alias now only applies to default branches being non-numeric (e.g. dev-main)
    • Fixed support for older lib-sodium versions
    • Fixed various minor issues

    [2.0.9] 2021-01-27

    • Added warning if the curl extension is not enabled as it significantly degrades performance
    • Fixed InstalledVersions to report all packages when several vendor dirs are present in the same runtime
    • Fixed download speed when downloading large files
    • Fixed archive and path repo copies mishandling some .gitignore paths
    • Fixed root package classes not being available to the plugins/scripts during the initial install
    • Fixed cache writes to be atomic and better support multiple Composer processes running in parallel
    • Fixed preg jit issues when config or require modifies large composer.json files
    • Fixed compatibility with envs having open_basedir restrictions
    • Fixed exclude-from-classmap causing regex issues when having too many paths

    ... (truncated)

    Commits

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
    • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
    • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
    • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

    You can disable automated security fix PRs for this repo from the Security Alerts page.

    dependencies 
    opened by dependabot[bot] 0
  • Bump symfony/http-kernel from 5.0.8 to 5.1.5

    Bump symfony/http-kernel from 5.0.8 to 5.1.5

    Bumps symfony/http-kernel from 5.0.8 to 5.1.5.

    Release notes

    Sourced from symfony/http-kernel's releases.

    v5.1.5

    Changelog (https://github.com/symfony/http-kernel/compare/v5.1.4...v5.1.5)

    • no changes

    v5.1.4

    Changelog (https://github.com/symfony/http-kernel/compare/v5.1.3...v5.1.4)

    • bug #37841 Backport handler lock when using VAR_DUMPER_FORMAT (ogizanagi)

    v5.1.3

    Changelog (https://github.com/symfony/http-kernel/compare/v5.1.2...v5.1.3)

    • bug #37341 Fix support for PHP8 union types (nicolas-grekas)

    v5.1.2

    Changelog (https://github.com/symfony/http-kernel/compare/v5.1.1...v5.1.2)

    • no changes

    v5.1.1

    Changelog (https://github.com/symfony/http-kernel/compare/v5.1.0...v5.1.1)

    • bug #37182 Fix regression where Store does not return response body correctly (mpdude)

    v5.1.0

    Changelog (https://github.com/symfony/http-kernel/compare/v5.1.0-RC2...v5.1.0)

    • no changes

    v5.1.0-RC2

    Changelog (https://github.com/symfony/http-kernel/compare/v5.1.0-RC1...v5.1.0-RC2)

    • bug #36891 Address deprecation of ReflectionType::getClass() (derrabus)
    • bug #36833 Fix that the Store would not save responses with the X-Content-Digest header present (mpdude)
    • bug #36855 Fix error logger when stderr is redirected to /dev/null (fabpot)
    • bug #36838 Bring back the debug toolbar (derrabus)

    v5.1.0-RC1

    Changelog (https://github.com/symfony/http-kernel/compare/v5.1.0-BETA1...v5.1.0-RC1)

    • bug #36789 Change priority of KernelEvents::RESPONSE subscriber (marcw)

    v5.0.11

    Changelog (https://github.com/symfony/http-kernel/compare/v5.0.10...v5.0.11)

    • bug #37341 Fix support for PHP8 union types (nicolas-grekas)

    v5.0.10

    Changelog (https://github.com/symfony/http-kernel/compare/v5.0.9...v5.0.10)

    Changelog

    Sourced from symfony/http-kernel's changelog.

    CHANGELOG

    5.2.0

    • added session usage
    • made the public http_cache service handle requests when available
    • allowed enabling trusted hosts and proxies using new kernel.trusted_hosts, kernel.trusted_proxies and kernel.trusted_headers parameters
    • content of request parameter _password is now also hidden in the request profiler raw content section
    • Allowed adding attributes on controller arguments that will be passed to argument resolvers.

    5.1.0

    • allowed to use a specific logger channel for deprecations
    • made WarmableInterface::warmUp() return a list of classes or files to preload on PHP 7.4+; not returning an array is deprecated
    • made kernels implementing WarmableInterface be part of the cache warmup stage
    • deprecated support for service:action syntax to reference controllers, use serviceOrFqcn::method instead
    • allowed using public aliases to reference controllers
    • added session usage reporting when the _stateless attribute of the request is set to true
    • added AbstractSessionListener::onSessionUsage() to report when the session is used while a request is stateless

    5.0.0

    • removed support for getting the container from a non-booted kernel
    • removed the first and second constructor argument of ConfigDataCollector
    • removed ConfigDataCollector::getApplicationName()
    • removed ConfigDataCollector::getApplicationVersion()
    • removed support for Symfony\Component\Templating\EngineInterface in HIncludeFragmentRenderer, use a Twig\Environment only
    • removed TranslatorListener in favor of LocaleAwareListener
    • removed getRootDir() and getName() from Kernel and KernelInterface
    • removed FilterControllerArgumentsEvent, use ControllerArgumentsEvent instead
    • removed FilterControllerEvent, use ControllerEvent instead
    • removed FilterResponseEvent, use ResponseEvent instead
    • removed GetResponseEvent, use RequestEvent instead
    • removed GetResponseForControllerResultEvent, use ViewEvent instead
    • removed GetResponseForExceptionEvent, use ExceptionEvent instead
    • removed PostResponseEvent, use TerminateEvent instead
    • removed SaveSessionListener in favor of AbstractSessionListener
    • removed Client, use HttpKernelBrowser instead
    • added method getProjectDir() to KernelInterface
    • removed methods serialize and unserialize from DataCollector, store the serialized state in the data property instead
    • made ProfilerStorageInterface internal
    • removed the second and third argument of KernelInterface::locateResource
    • removed the second and third argument of FileLocator::__construct
    Commits
    • 3e32676 Update VERSION for 5.1.5
    • f855601 Merge branch '4.4' into 5.1
    • cdf1e9b security #cve-2020-15094 Remove headers with internal meaning from HttpClient...
    • 8e8d0ed Remove headers with internal meaning from HttpClient responses
    • 05293dd Bump Symfony version to 5.1.5
    • f829c24 Update VERSION for 5.1.4
    • a5ed890 Bump Symfony version to 4.4.13
    • f93f6b3 Update VERSION for 4.4.12
    • 794f3d4 Merge branch '4.4' into 5.1
    • 98fb210 minor #37831 stop using deprecated PHPUnit APIs (xabbuh)
    • Additional commits viewable in compare view

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
    • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
    • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
    • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

    You can disable automated security fix PRs for this repo from the Security Alerts page.

    dependencies 
    opened by dependabot[bot] 0
Releases(1.1.1)
Owner
Félix Dorn
Félix Dorn
Datenstrom Yellow is for people who make small websites.

Datenstrom Yellow is for people who make small websites.

Datenstrom 389 Jan 7, 2023
Using this site your can buy and sell your property.

About Laravel Laravel is a web application framework with expressive, elegant syntax. We believe development must be an enjoyable and creative experie

Hossain Mohammad Shahidullah Jaber 4 Nov 17, 2022
Package to optimize your site automatically which results in a 35%+ optimization

Laravel Page Speed Simple package to minify HTML output on demand which results in a 35%+ optimization. Laravel Page Speed was created by Renato Marin

Renato Marinho 2.2k Dec 28, 2022
Le module PrestaShop Dronic© permet très facilement d'ajouter à votre site Prestashop un configurateur de drone FPV !

Description Le module PrestaShop Dronic© permet très facilement d'ajouter à votre site Prestashop un configurateur de drone FPV ! Ce module utilise de

Theo 3 Nov 19, 2021
CRUD utilizando laravel, sendo um site para criação de eventos e festivais.

About Laravel Laravel is a web application framework with expressive, elegant syntax. We believe development must be an enjoyable and creative experie

Bruno 2 Oct 20, 2021
Création d'un livre d’or permettant aux utilisateurs de laisser leurs avis sur le site internet.

?? Livre d'or ?? // Création d'un livre d’or permettant aux utilisateurs de laisser leurs avis sur le site internet. // ?? Description du projet Créat

Alexandre DAUMAIL 0 Apr 4, 2022
Um site para diversos tipos de notícias.

Notícias Um site para diversos tipos de notícias. Configuração Tenha o Composer instalado em sua máquina e através de seu terminal entre no diretório

Ryan Menezes 2 Jan 1, 2022
The official Statamic 3 static site generator package

Statamic Static Site Generator Generate static sites with Statamic 3. Installation Install the package using Composer: composer require statamic/ssg

Statamic 187 Dec 25, 2022
A site which you can apply jobs or search for employees with cool functionalities..

About App An App which you can apply jobs or search for employees with cool functionalities. Some Pics of App Click Image to Zoom in Sign In & Up Empl

Fatih Canbolat 1 Jan 7, 2022
🧾 Online test site with the human sciences theme. Using: HTML5, CSS3, Js., PHP7 and MySQL. 🚀

form-ciencias-humanas ?? Technologies Lunacy HTML5 CSS3 PHP7 MYSQL Animate.css Illustrations from icons8: Earth care from Anna Antipina Earth and Moon

Vinícius 1 Jan 9, 2022
Projeto do Challange Back End Da Alura. Mais Detalhes no Site Oficial da Alura

Alura Challange BackEnd Projeto do Challange Back End Da Alura. Mais Detalhes no Site Oficial da Alura! Sobre o desafio Uma Aplicação (API REST) para

DinoDev 3 Jan 21, 2022
Worlds (soon to be) most advanced Anime site! Featuring Administration features and everything you need for users and yourself. The successor of aniZero.

/**********************************************************************\ | _____ H33Tx & xHENAI __ 31.01.2022| |

HENAI.eu 40 Jan 3, 2023
Symfony bundle that provides Cross Site Request Forgery (CSRF or XSRF) protection for client-side applications

CSRF Cookie Bundle This Symfony bundle provides Cross Site Request Forgery (CSRF or XSRF) protection for client-side applications requesting endpoints

David Neustadt 8 Nov 28, 2022
🧑‍🔬 The missing assertions for your views in your Laravel applications.

Laravel View Assertions The missing assertions for your views in your Laravel applications. Installation You'll have to follow a couple of simple step

Sven Luijten 4 Dec 21, 2022
Automatically load your helpers in your laravel application.

Laravel AutoHelpers Automatically load your helpers in your laravel application. Installation You can install the package via composer: composer requi

Florian Wartner 6 Jul 26, 2021
Stop duplicating your Eloquent query scopes and constraints in PHP. This package lets you re-use your query scopes and constraints by adding them as a subquery.

Laravel Eloquent Scope as Select Stop duplicating your Eloquent query scopes and constraints in PHP. This package lets you re-use your query scopes an

Protone Media 75 Dec 7, 2022
Llum illuminates your Laravel projects speeding up your Github/Laravel development workflow

Llum illuminates your Laravel projects speeding up your Github/Laravel development workflow

Sergi Tur Badenas 110 Dec 25, 2022
Podcastwala - Your very own Podcast web app built with Laravel. Manage and listen to your favorite podcasts

Podcastwala Your very own Podcast web app built with Laravel 5. This web app enables you to manage RSS feeds for your favorite podcasts and listen to

null 142 Sep 14, 2022
A package to keep track of your pages & understand your audience

A clean way to track your pages & understand your user's behavior Installation You can install the package via composer: composer require coderflexx/l

Coderflex 178 Jan 4, 2023