kantarciandClaude Fable 5.1
7eb462ac7b
SITE_ORIGIN alone decides whether the site is www or not: CanonicalHostSubscriber sends the other spelling there with 301, cms:site:origin writes the setting, the system screen shows it. The roles now match the role help (editor: drafts, publisher: live content, admin: design, settings, users, system). The installer no longer reopens on an unreachable database, the session cookie follows ADMIN_PATH, percent-encoded credentials no longer break the container, consent only accepts same-site decisions, JSON-LD is HTML-safe, own CSS stays in its block, plus the editor, updater, download and public-output findings from the full review (ADR 099, ADR 100). Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
28 lines
1.1 KiB
YAML
28 lines
1.1 KiB
YAML
framework:
|
|
secret: '%env(APP_SECRET)%'
|
|
csrf_protection: true
|
|
session:
|
|
handler_id: null
|
|
storage_factory_id: session.storage.factory.native
|
|
save_path: '%kernel.project_dir%/var/sessions/%kernel.environment%'
|
|
cookie_httponly: true
|
|
cookie_samesite: lax
|
|
cookie_secure: auto
|
|
# Der Pfad folgt der Adresse der Verwaltung: hiesse sie anders und das Cookie weiter
|
|
# /admin, schickte der Browser es nie mit, und keine Anmeldung kaeme je an.
|
|
cookie_path: '/%kant.admin_path%'
|
|
name: KANTSESSION
|
|
router:
|
|
utf8: true
|
|
handle_all_throwables: true
|
|
http_method_override: false
|
|
disallow_search_engine_index: '%kernel.debug%'
|
|
php_errors:
|
|
log: true
|
|
mailer:
|
|
# Default to the host's sendmail, which is what ordinary PHP hosting offers. Override with
|
|
# MAILER_DSN in .env for SMTP. Delivery failures never lose a submission: it is
|
|
# stored first and stays visible as undelivered in the administration.
|
|
# Ohne `resolve:`: ein SMTP-Passwort mit Prozentzeichen ist kein Parametername.
|
|
dsn: '%env(MAILER_DSN)%'
|