#Security

2 articles

Bright green emergency exit sign illuminated in darkness — the official escape hatch

Read article: Symfony Silently Kills Your HTTP Cache When a Session Starts

September 2, 2026 7 minutes reading

Symfony PHP HTTP Cache API Platform Security

Your API Platform cacheHeaders say public, Symfony replies private, max-age=0. Blame AbstractSessionListener at priority -1000 — and its documented escape hatch Symfony-Session-NoAutoCacheControl.

Read article: My EventSubscriber silenced errors, here's why

April 13, 2026 5 minutes reading

Symfony Debug Security

My whitelist route EventSubscriber was throwing AccessDenied errors in logs with no apparent reason. Here's how I discovered it was actually hiding the real error behind the scenes.

All tags