Skip to content

Released version 3.1.0

Choose a tag to compare

@dg dg released this 31 Dec 19:11
  • requires PHP 7.2
  • Response::setCookie() default $sameSite is 'Lax' (BC break)
  • Response::setCookie() prevents an inappropriate combination of path and domain
  • Response: deprecated $cookieHttpOnly
  • Request::getFile() accepts array of keys and returns FileUpload|null (BC break)
  • FileUpload::getImageSize() returns only [x, y] values (BC break)
  • UrlImmutable: added withQueryParameter()
  • Url: silently deprecated getBasePath(), getBaseUrl(), getRelativeUrl()
  • UserStorage is deprecated by Nette\Bridges\SecurityHttp\SessionStorage

Session & Cookies

  • Session: default sameSite is 'Lax' (BC break)
  • SessionExtension: option session.cookieSecure is deprecated, http.cookieSecure is used (BC break)
  • SessionExtension: checks that cookieSamesite is Lax|Strict|None (BC break)
  • SessionSection: can read data when session is closed
  • Session: deprecated getCookieParameters() triggers E_USER_DEPRECATED
  • HttpExtension: added options cookiePath & cookieDomain
  • HttpExtension: cookieSecure is by default 'auto' (BC break)
  • cookie nette-samesite renamed to _nss