New CS proposal: [Symfony_Cheatsheet]

[oxygensend]

What is the proposed Cheat Sheet about?

This cheat sheet aims to provide developers with essential guidelines and best practices for securing Symfony applications. It covers common security issues encountered in Symfony apps and offers practical solutions to mitigate these risks.

What security issues are commonly encountered related to this area?

1. Cross-Site Scripting (XSS)
2. Cross-Site Request Forgery (CSRF)
3. Session Security
4. SQL Injection
5. Command Injection
6. Open Redirection
7. File Upload Vulnerabilities
8. CORS Configuration
9. Security Headers
10. Security Misconfigurations
11. Authentication
12. Error Handling Disclosure
13. API Rate Limiting
14. Debug Mode
15. Sensitive data/files
16. Encryption
17. Dependency Vulnerabilities

What is the objective of the Cheat Sheet?

The cheat sheet aims to empower developers with actionable security measures specific to Symfony applications. By following this cheat sheet, developers can enhance the security of their apps, ensuring protection against various threats.

What other resources exist in this area?

Symfony Documetation - contains detailed security-related features and configurations https://symfony.com/doc/current/index.html

[jmanico]

Cool idea

[szh]

Is there any data on how popular Symfony is among developers? If this is a well-used framework then I think it makes sense to have a cheat sheet for it.

[oxygensend]

@szh I don't have any data, I suppose we can find it somewhere, but Symfony along with Laravel, which is based on Symfony components, are two the most popular PHP frameworks for web development. Symfony is slightly more popular and more ordered than Laravel in my regions

[szh]

Thanks for the background. I took a look at their repository and it seems quite active. I'm simply not familiar with the PHP community which is why I asked.

[oxygensend]

I've started working on this cheatsheet, I'll share my pull request with you when it'll be done :)

[szh]

Awesome, thanks for keeping us posted @oxygensend

[szh]

Covered in #1230