diff --git a/CHANGELOG.md b/CHANGELOG.md index 571e4d554..4aa433f06 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,12 +1,18 @@ # Change Log -## [Unreleased](https://github.com/liip/LiipImagineBundle/tree/1.7.1) (2017-xx-xx) -[Full Changelog](https://github.com/liip/LiipImagineBundle/compare/1.7.1...1.0) - -- Use Prestissimo package for Travis build [\#864](https://github.com/liip/LiipImagineBundle/pull/864) ([robfrawley](https://github.com/robfrawley)) -- Add github issue and pr templates [\#863](https://github.com/liip/LiipImagineBundle/pull/863) ([robfrawley](https://github.com/robfrawley)) -- Bug fixes/deprecation cleanup for Symfony 3.3 [\#860](https://github.com/liip/LiipImagineBundle/pull/860) ([robfrawley](https://github.com/robfrawley)) -- Upscale filter should use the highest dimension [\#856](https://github.com/liip/LiipImagineBundle/pull/856) ([Rattler3](https://github.com/Rattler3)) +## [Unreleased](https://github.com/liip/LiipImagineBundle/tree/HEAD) (2017-xx-xx) +[Full Changelog](https://github.com/liip/LiipImagineBundle/compare/1.7.2...HEAD) + +## [1.7.2](https://github.com/liip/LiipImagineBundle/tree/HEAD) (2017-02-07) +[Full Changelog](https://github.com/liip/LiipImagineBundle/compare/1.7.2...1.7.1) + +- \[Loader\] Abstract filesystem resource locator and legacy insecure locator implementation [\#866](https://github.com/liip/LiipImagineBundle/pull/866) ([robfrawley](https://github.com/robfrawley)) +- \[Minor\] \[Loader\] Fix for FileSystemLoader annotation [\#868](https://github.com/liip/LiipImagineBundle/pull/868) ([tgabi333](https://github.com/tgabi333)) +- \[DependencyInjection\] Container logging for compiler passes [\#867](https://github.com/liip/LiipImagineBundle/pull/867) ([robfrawley](https://github.com/robfrawley)) +- \[CI\] Use Prestissimo package for Travis build [\#864](https://github.com/liip/LiipImagineBundle/pull/864) ([robfrawley](https://github.com/robfrawley)) +- \[GitHub\] Add Hithub templates for issues and PRs [\#863](https://github.com/liip/LiipImagineBundle/pull/863) ([robfrawley](https://github.com/robfrawley)) +- \[Symfony\] Bug fixes and deprecation cleanup for Symfony 3.3 [\#860](https://github.com/liip/LiipImagineBundle/pull/860) ([robfrawley](https://github.com/robfrawley)) +- \[Filter\] Upscale filter should use the highest dimension to calculate ratio [\#856](https://github.com/liip/LiipImagineBundle/pull/856) ([Rattler3](https://github.com/Rattler3)) ## [1.7.1](https://github.com/liip/LiipImagineBundle/tree/1.7.1) (2017-01-19) [Full Changelog](https://github.com/liip/LiipImagineBundle/compare/1.7.0...1.7.1) diff --git a/UPGRADE.md b/UPGRADE.md index ebd59ccc3..1313f33c2 100644 --- a/UPGRADE.md +++ b/UPGRADE.md @@ -1,6 +1,77 @@ # Upgrade -## 1.7.x +## 1.7.2 + + - __[Data Loader]__ The `FileSystemLoader`'s resource locator has been abstracted out into `FileSystemLocator` + (provides the same `realpath`-based locator algorithm introduced in the `1.7.0` release) and `FileSystemInsecureLocator` + (provides the old locator algorithm from version `1.6.x` and prior). + + The latter implementation can present security concerns, as it will blindly following symbolic links, including those + that point outside your configured `data_root` directory(ies). It is *not recommended* unless your deployment process + relies heavily on multi-level symbolic links that renders the new locator difficult (and sometime impossible) to +setup. + + - __[Deprecation]__ __[Data Loader]__ Instantiating `FileSystemLoader` without providing a forth constructor argument + of signature `\Liip\ImagineBundle\Binary\Locator\LocatorInterface $locator` is deprecated and the ability to do so + will be removed in the next major release, `2.0`. + + - __[Configuration]__ The `liip_imagine.loaders.default.filesystem.locator` bundle configuration option has been + introduced and allows the following `enum` values: `filesystem` and `filesystem_insecure`. These correspond to the + aforementioned `FileSystemLocator` and `FileSystemInsecureLocator` resource locator implementations that affect the + behavior of `FileSystemLoader`. This option defaults to `filesystem`. + + ```yml + + # use the current, default locator algorithm + liip_imagine: + loaders: + default: + filesystem: + locator: filesystem + + # use the old (pre 0.7.x) locator algorithm + liip_imagine: + loaders: + default: + filesystem: + locator: filesystem_insecure + + ``` + + - __[Dependency Injection]__ All compiler passes (filters, post-processors, data loaders, cache resolvers, etc) have + been updated to log their behavior, allowing you to easily debug tagged services, including both core-provided and + custom services defined by your application). In Symfony `>= 3.2` this output is located in the + `var/cache/[dev|prod|env]/app*ProjectContainerCompiler.log` file. Output will be similar to the following example on + a fresh install. + + ``` + + LoadersCompilerPass: Registered imagine-bimdle binary loader: liip_imagine.binary.loader.default + FiltersCompilerPass: Registered imagine-bimdle filter loader: liip_imagine.filter.loader.relative_resize + FiltersCompilerPass: Registered imagine-bimdle filter loader: liip_imagine.filter.loader.resize + FiltersCompilerPass: Registered imagine-bimdle filter loader: liip_imagine.filter.loader.thumbnail + FiltersCompilerPass: Registered imagine-bimdle filter loader: liip_imagine.filter.loader.crop + FiltersCompilerPass: Registered imagine-bimdle filter loader: liip_imagine.filter.loader.grayscale + FiltersCompilerPass: Registered imagine-bimdle filter loader: liip_imagine.filter.loader.paste + FiltersCompilerPass: Registered imagine-bimdle filter loader: liip_imagine.filter.loader.watermark + FiltersCompilerPass: Registered imagine-bimdle filter loader: liip_imagine.filter.loader.background + FiltersCompilerPass: Registered imagine-bimdle filter loader: liip_imagine.filter.loader.strip + FiltersCompilerPass: Registered imagine-bimdle filter loader: liip_imagine.filter.loader.scale + FiltersCompilerPass: Registered imagine-bimdle filter loader: liip_imagine.filter.loader.upscale + FiltersCompilerPass: Registered imagine-bimdle filter loader: liip_imagine.filter.loader.downscale + FiltersCompilerPass: Registered imagine-bimdle filter loader: liip_imagine.filter.loader.auto_rotate + FiltersCompilerPass: Registered imagine-bimdle filter loader: liip_imagine.filter.loader.rotate + FiltersCompilerPass: Registered imagine-bimdle filter loader: liip_imagine.filter.loader.interlace + PostProcessorsCompilerPass: Registered imagine-bimdle filter post-processor: liip_imagine.filter.post_processor.jpegoptim + PostProcessorsCompilerPass: Registered imagine-bimdle filter post-processor: liip_imagine.filter.post_processor.optipng + PostProcessorsCompilerPass: Registered imagine-bimdle filter post-processor: liip_imagine.filter.post_processor.pngquant + PostProcessorsCompilerPass: Registered imagine-bimdle filter post-processor: liip_imagine.filter.post_processor.mozjpeg + ResolversCompilerPass: Registered imagine-bimdle cache resolver: liip_imagine.cache.resolver.default + ResolversCompilerPass: Registered imagine-bimdle cache resolver: liip_imagine.cache.resolver.no_cache_web_path + + ``` + +## 1.7.1 - __[Data Loader]__ The `FileSystemLoader` data loader performs a more robust security check against image resource paths to ensure they reside within the defined data root path(s). If utilizing symbolic links, you should reference