{ "locks": { "nelmio/security-bundle": { "version": "2.4", "recipe": { "repo": "2.4", "branch": "master", "version": "2.4", "ref": "65726efb67ff51d89de38195bc0d230fa811f64d" } } }, "manifests": { "nelmio/security-bundle": { "repository": "github.com/symfony/recipes", "package": "nelmio/security-bundle", "version": "2.4", "manifest": { "bundles": { "Nelmio\\SecurityBundle\\NelmioSecurityBundle": [ "all" ] }, "copy-from-recipe": { "config/": "%CONFIG_DIR%/" } }, "files": { "config/packages/nelmio_security.yaml": { "contents": "nelmio_security:\n # prevents framing of the entire site\n clickjacking:\n paths:\n '^/.*': DENY\n\n # disables content type sniffing for script resources\n content_type:\n nosniff: true\n\n # forces Microsoft's XSS-Protection with\n # its block mode\n xss_protection:\n enabled: true\n mode_block: true\n\n # Send a full URL in the `Referer` header when performing a same-origin request,\n # only send the origin of the document to secure destination (HTTPS->HTTPS),\n # and send no header to a less secure destination (HTTPS->HTTP).\n # If `strict-origin-when-cross-origin` is not supported, use `no-referrer` policy,\n # no referrer information is sent along with requests.\n referrer_policy:\n enabled: true\n policies:\n - 'no-referrer'\n - 'strict-origin-when-cross-origin'\n", "executable": false, "encoding": "" } }, "origin": "nelmio/security-bundle:2.4@github.com/symfony/recipes:master", "is_contrib": false } } }