Symfony.si #30

    </div>
    <br>
    <blockquote><p>{{ post.intro }}</p></blockquote>
    <p>{{ post.content|raw }}</p>
Using the |raw filter or the {% autoescape false %} block in a Twig template exposes users to Cross-Site Scripting (XSS) attacks
Time to fix: about 3 hours

                Open Issue
             Permalink

                                    Last edited Mon, 07 Oct 2013 20:19:47 +0200 by Peter Kokot
                    
    <div id="disqus_thread"></div>
    <script>
        /**
         *  RECOMMENDED CONFIGURATION VARIABLES: EDIT AND UNCOMMENT THE SECTION BELOW TO INSERT DYNAMIC VALUES FROM YOUR PLATFORM OR CMS.

    <ul>
        {% for bundle in bundles %}
            <li>
                <a href="{{ bundle.url }}" target="_blank">{{ bundle.name }}</a><br>
                <small>{{ bundle.description|raw }}</small>
Using the |raw filter or the {% autoescape false %} block in a Twig template exposes users to Cross-Site Scripting (XSS) attacks
Time to fix: about 3 hours

                Open Issue
             Permalink

                                    Last edited Tue, 21 Jun 2016 20:15:29 +0200 by Peter Kokot
                    
            </li>
        {% endfor %}
    </ul>
{% endblock %}

    <div class="text-left">
        <span class="glyphicon glyphicon-time" aria-hidden="true"></span> <em>Čas branja: {{ psr.readTime }}</em> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
        <span class="glyphicon glyphicon-edit" aria-hidden="true"></span> <em>Zadnja sprememba: {{ psr.updated|date("d.m.Y") }}</em>
    </div>
    {{ psr.content|raw }}
Using the |raw filter or the {% autoescape false %} block in a Twig template exposes users to Cross-Site Scripting (XSS) attacks
Time to fix: about 3 hours

                Open Issue
             Permalink

                                    Last edited Tue, 21 Jun 2016 00:13:11 +0200 by Peter Kokot
                    
{% endblock %}
{% block sidebar %}
    {% if psr.meta %}
        <h2>Meta dokument</h2>

    public function findAll()
    {
        $finder = new Finder();
        $finder->files()->in($this->path.'/Resources/content/blog');
        $finder->files()->name('*.md');
        $finder->sort(function ($a, $b) { return strcmp($b->getRealpath(), $a->getRealpath()); });
The parameter a, which is an object, should be typehinted.
Time to fix: about 1 hour

                Open Issue
             Permalink

                                    Last edited Tue, 21 Jun 2016 00:13:11 +0200 by Peter Kokot
                    
        $posts = [];
        foreach ($finder as $file) {
            $post = $this->getPostByFile($file->getRealPath());
            $posts[] = $post;

    public function findAll()
    {
        $finder = new Finder();
        $finder->files()->in($this->path.'/Resources/content/blog');
        $finder->files()->name('*.md');
        $finder->sort(function ($a, $b) { return strcmp($b->getRealpath(), $a->getRealpath()); });
The parameter b, which is an object, should be typehinted.
Time to fix: about 1 hour

                Open Issue
             Permalink

                                    Last edited Tue, 21 Jun 2016 00:13:11 +0200 by Peter Kokot
                    
        $posts = [];
        foreach ($finder as $file) {
            $post = $this->getPostByFile($file->getRealPath());
            $posts[] = $post;

    public function findLatest($limit = 10)
    {
        $finder = new Finder();
        $finder->files()->in($this->path.'/Resources/content/blog');
        $finder->files()->name('*.md');
        $finder->sort(function ($a, $b) { return strcmp($b->getRealpath(), $a->getRealpath()); });
The parameter a, which is an object, should be typehinted.
Time to fix: about 1 hour

                Open Issue
             Permalink

                                    Last edited Tue, 21 Jun 2016 00:13:11 +0200 by Peter Kokot
                    
        $posts = [];
        foreach (new \LimitIterator($finder->getIterator(), 0, $limit) as $file) {
            $post = $this->getPostByFile($file->getRealPath());
            $posts[] = $post;

    public function findLatest($limit = 10)
    {
        $finder = new Finder();
        $finder->files()->in($this->path.'/Resources/content/blog');
        $finder->files()->name('*.md');
        $finder->sort(function ($a, $b) { return strcmp($b->getRealpath(), $a->getRealpath()); });
The parameter b, which is an object, should be typehinted.
Time to fix: about 1 hour

                Open Issue
             Permalink

                                    Last edited Tue, 21 Jun 2016 00:13:11 +0200 by Peter Kokot
                    
        $posts = [];
        foreach (new \LimitIterator($finder->getIterator(), 0, $limit) as $file) {
            $post = $this->getPostByFile($file->getRealPath());
            $posts[] = $post;

$kernel = new AppKernel('prod', false);
$kernel->loadClassCache();
$kernel = new AppCache($kernel);
// When using the HttpCache, you need to call the method in your front controller instead of relying on the configuration parameter
//Request::enableHttpMethodParameterOverride();
Commented out code reduces readability and lowers the code confidence for other developers. If it's common usage for debug, it should not be committed. Using a version control system, such code can be safely removed.
Time to fix: about 30 minutes

                Open Issue
             Permalink

                                    Last edited Sun, 12 Jun 2016 18:18:15 +0200 by Peter Kokot
                    
$request = Request::createFromGlobals();
$response = $kernel->handle($request);
$response->send();
$kernel->terminate($request, $response);

{% block javascripts %}
    {{ parent() }}
    <script id="dsq-count-scr" src="//symfonysi.disqus.com/count.js" async></script>
{% endblock %}
This file ends with no newline character. It won't render properly on a terminal, and it's considered a bad practice. Add a simple line feed as the last character to fix it.
Time to fix: about 15 minutes

                Open Issue
             Permalink

                                    Last edited Tue, 21 Jun 2016 20:15:29 +0200 by Peter Kokot
                    

            {% if sidebarpsr.meta %}
                <li{% if path('psr_show', {'slug': sidebarpsr.meta.slug}) == currentPath %} class="active"{% endif %}><a href="{{ path('psr_show', {'slug': sidebarpsr.meta.slug}) }}">{{ sidebarpsr.meta.title }}</a></li>
            {% endif %}
        {% endfor %}
    </ul>
{% endblock %}
This file ends with no newline character. It won't render properly on a terminal, and it's considered a bad practice. Add a simple line feed as the last character to fix it.
Time to fix: about 15 minutes

                Open Issue
             Permalink

                                    Last edited Tue, 21 Jun 2016 00:13:11 +0200 by Peter Kokot
                    

{% block title %}{{ status_code }} {{ status_text }}{% endblock %}
{% block body %}
    <h1>Oops! And Error Occurred</h1>
    <h2>The server returned a "{{ status_code }} {{ status_text }}".</h2>
{% endblock %}
This file ends with no newline character. It won't render properly on a terminal, and it's considered a bad practice. Add a simple line feed as the last character to fix it.
Time to fix: about 15 minutes

                Open Issue
             Permalink

                                    Last edited Fri, 13 Feb 2015 11:41:53 +0100 by Peter Kokot
                    

if (d.getElementById(id)) return;
js = d.createElement(s); js.id = id;
js.src = "//connect.facebook.net/en_US/sdk.js#xfbml=1&version=v2.6&appId=1062356410505765";
fjs.parentNode.insertBefore(js, fjs);
}(document, 'script', 'facebook-jssdk'));</script>
<div class="fb-page" data-href="https://www.facebook.com/symfony.si/" data-small-header="true" data-adapt-container-width="true" data-hide-cover="true" data-show-facepile="true"><blockquote cite="https://www.facebook.com/symfony.si/" class="fb-xfbml-parse-ignore"><a href="https://www.facebook.com/symfony.si/">Symfony Slovenia</a></blockquote></div>
This file ends with no newline character. It won't render properly on a terminal, and it's considered a bad practice. Add a simple line feed as the last character to fix it.
Time to fix: about 15 minutes

                Open Issue
             Permalink

                                    Last edited Tue, 21 Jun 2016 00:13:11 +0200 by Peter Kokot
                    

    })(window,document,'script','//www.google-analytics.com/analytics.js','ga');
    ga('create', 'UA-59671004-1', 'auto');
    ga('send', 'pageview');
</script>
This file ends with no newline character. It won't render properly on a terminal, and it's considered a bad practice. Add a simple line feed as the last character to fix it.
Time to fix: about 15 minutes

                Open Issue
             Permalink

                                    Last edited Wed, 11 Feb 2015 22:56:14 +0100 by Peter Kokot
                    

    public function getReadTime()
    {
        return $this->readTime;
    }
}
This file ends with no newline character. It won't render properly on a terminal, and it's considered a bad practice. Add a simple line feed as the last character to fix it.
Time to fix: about 15 minutes

                Open Issue
             Permalink

                                    Last edited Tue, 21 Jun 2016 00:13:11 +0200 by Peter Kokot