Merge pull request #354 from martijnc/restore-default-xss-confg

Restore deprecated XSS default configuration values
nelmio · Jul 5, 2024 · de34d69 · de34d69
2 parents 2958114 + 4d4351b
commit de34d69
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/src/DependencyInjection/Configuration.php b/src/DependencyInjection/Configuration.php
@@ -338,9 +338,9 @@ private function getXssProtectionNode(): ArrayNodeDefinition
         $node->setDeprecated('nelmio/security-bundle', '3.4.0', 'The "%node%" option is deprecated, use Content Security Policy without allowing "unsafe-inline" scripts instead.');
         $node
             ->children()
-                ->booleanNode('enabled')->end()
-                ->booleanNode('mode_block')->end()
-                ->scalarNode('report_uri')->end()
+                ->booleanNode('enabled')->defaultFalse()->end()
+                ->booleanNode('mode_block')->defaultFalse()->end()
+                ->scalarNode('report_uri')->defaultNull()->end()
             ->end();
 
         return $node;