From bebabd22174c05b3f1f5f71491d98c59605e6b7b Mon Sep 17 00:00:00 2001
From: "github-action[bot]" <>
Date: Tue, 8 Oct 2024 10:12:13 +0000
Subject: [PATCH] Update Flex endpoint

---
 ...45833e4f882ad9de8c95fe47efb99a1eec2f7.json | 45 +++++++++++++++++++
 nelmio.security-bundle.2.4.json               |  8 +---
 2 files changed, 46 insertions(+), 7 deletions(-)
 create mode 100644 archived/nelmio.security-bundle/71045833e4f882ad9de8c95fe47efb99a1eec2f7.json

diff --git a/archived/nelmio.security-bundle/71045833e4f882ad9de8c95fe47efb99a1eec2f7.json b/archived/nelmio.security-bundle/71045833e4f882ad9de8c95fe47efb99a1eec2f7.json
new file mode 100644
index 00000000..7b80c296
--- /dev/null
+++ b/archived/nelmio.security-bundle/71045833e4f882ad9de8c95fe47efb99a1eec2f7.json
@@ -0,0 +1,45 @@
+{
+    "manifests": {
+        "nelmio/security-bundle": {
+            "manifest": {
+                "bundles": {
+                    "Nelmio\\SecurityBundle\\NelmioSecurityBundle": [
+                        "all"
+                    ]
+                },
+                "copy-from-recipe": {
+                    "config/": "%CONFIG_DIR%/"
+                }
+            },
+            "files": {
+                "config/packages/nelmio_security.yaml": {
+                    "contents": [
+                        "nelmio_security:",
+                        "    # prevents framing of the entire site",
+                        "    clickjacking:",
+                        "        paths:",
+                        "            '^/.*': DENY",
+                        "",
+                        "    # disables content type sniffing for script resources",
+                        "    content_type:",
+                        "        nosniff: true",
+                        "",
+                        "    # Send a full URL in the `Referer` header when performing a same-origin request,",
+                        "    # only send the origin of the document to secure destination (HTTPS->HTTPS),",
+                        "    # and send no header to a less secure destination (HTTPS->HTTP).",
+                        "    # If `strict-origin-when-cross-origin` is not supported, use `no-referrer` policy,",
+                        "    # no referrer information is sent along with requests.",
+                        "    referrer_policy:",
+                        "        enabled: true",
+                        "        policies:",
+                        "            - 'no-referrer'",
+                        "            - 'strict-origin-when-cross-origin'",
+                        ""
+                    ],
+                    "executable": false
+                }
+            },
+            "ref": "71045833e4f882ad9de8c95fe47efb99a1eec2f7"
+        }
+    }
+}
diff --git a/nelmio.security-bundle.2.4.json b/nelmio.security-bundle.2.4.json
index feaa310a..7b80c296 100644
--- a/nelmio.security-bundle.2.4.json
+++ b/nelmio.security-bundle.2.4.json
@@ -24,12 +24,6 @@
                         "    content_type:",
                         "        nosniff: true",
                         "",
-                        "    # forces Microsoft's XSS-Protection with",
-                        "    # its block mode",
-                        "    xss_protection:",
-                        "        enabled: true",
-                        "        mode_block: true",
-                        "",
                         "    # Send a full URL in the `Referer` header when performing a same-origin request,",
                         "    # only send the origin of the document to secure destination (HTTPS->HTTPS),",
                         "    # and send no header to a less secure destination (HTTPS->HTTP).",
@@ -45,7 +39,7 @@
                     "executable": false
                 }
             },
-            "ref": "65726efb67ff51d89de38195bc0d230fa811f64d"
+            "ref": "71045833e4f882ad9de8c95fe47efb99a1eec2f7"
         }
     }
 }