Symfony Station Communiqué - 19 May 2023. A look at Symfony, Drupal, PHP, Cybersecurity, and Fediverse news!
Tags: symfony, drupal, php, fediverse
Published: 2023-05-23 22:14:29

This communiqué [originally appeared on Symfony Station](https://www.symfonystation.com/Symfony-Station-Communique-19-May-2023).

Welcome to this week's Symfony Station communiqué. It's your review of the essential news in the Symfony and PHP development communities focusing on protecting democracy. We also cover the cybersecurity world and the Fediverse. 

There is plenty of good content in each category this week, so please take your time and enjoy the ones most relevant and valuable to you. An uptick in Symfony articles this week is fantastic, including our newest effort, which is decent. ;)

Or jump straight to your favorite section via our website.

 

- [Symfony](https://www.symfonystation.com/Symfony-Station-Communique-19-May-2023#symfony)
- [PHP](https://www.symfonystation.com/Symfony-Station-Communique-19-May-2023#php)
- [Other](https://www.symfonystation.com/Symfony-Station-Communique-19-May-2023#other)
- [Cybersecurity](https://www.symfonystation.com/Symfony-Station-Communique-19-May-2023#cybersecurity)
- [More programming](https://www.symfonystation.com/Symfony-Station-Communique-19-May-2023#more)
- [Fediverse](https://www.symfonystation.com/Symfony-Station-Communique-19-May-2023#fediverse)

Once again, thanks to Javier Eguiluz and Symfony for sharing [our latest communiqué](https://www.symfonystation.com/Symfony-Station-Communique-12-May-2023) in their [Week of Symfony](https://symfony.com/blog/a-week-of-symfony-854-8-14-may-2023). 

**My opinions will be in bold. And will often involve profanity.**

---

A significant proportion of the content we curate is on Medium. I highly recommend investing in a membership to access all the articles you want to read. It's a small investment that can boost your career. As you may have noticed, non-members can only access a limited number of articles per month.

**[Become a member here](https://medium.com/@mobileatom/membership)**! The compensation we receive from your use of this link helps pay for our weekly communiqué.

---

![https://www.symfonystation.com/sites/default/files/inline-images/Symfony-2.png](https://www.symfonystation.com/sites/default/files/inline-images/Symfony-2.png)

## Symfony

As always, we will start with the official news from Symfony. 

Highlight -> “This week, Symfony 6.3.0 beta2 and beta3 were released, so you can test them in your own projects and report bugs before its final release. Meanwhile, we continued adding features to the new AssetMapper component. Lastly, we announced a round of lightning talks during the SymfonyOnline June 2023 conference.“

[A Week of Symfony #854 (8-14 May 2023)](https://symfony.com/blog/a-week-of-symfony-854-8-14-may-2023)

Symfony announced:

[New in Symfony 6.3: HttpClient Improvements](https://symfony.com/blog/new-in-symfony-6-3-httpclient-improvements)

[New in Symfony 6.3: DX Improvements (Part 2)](https://symfony.com/blog/new-in-symfony-6-3-dx-improvements-part-2)

[New in Symfony 6.3: DX Improvements (Part 3)](https://symfony.com/blog/new-in-symfony-6-3-dx-improvements-part-3)

[New in Symfony 6.3: Notifier Integrations](https://symfony.com/blog/new-in-symfony-6-3-notifier-integrations)

[New in Symfony 6.3: WebProfiler Improvements](https://symfony.com/blog/new-in-symfony-6-3-webprofiler-improvements)

[Symfony UX Svelte Documentation](https://symfony.com/bundles/ux-svelte/current/index.html)

**Awesome!**

[Symfony core team members selected at the API Platform Conference 2023](https://symfony.com/blog/symfony-core-team-members-selected-at-the-api-platform-conference-2023)

Blackfire has:

[Meeting Uwe Kleinmann: Shopware performance optimization with Blackfire](https://blog.blackfire.io/meeting-uwe-kleinmann-shopware-performance-optimization-with-blackfire.html)

SymfonyCasts continues its API Platform course: ???

[This week on SymfonyCasts](https://5hy9x.r.a.d.sendibm1.com/mk/mr/QlpkHE2PgxIIUEDaSACc0djndOm5qujdDyMJpGnwy5IiVsfXVkjD69csjHAfz6_i6dCPFxxCX984QdVeeWKYmO4VT0gPsjCXTHhB_Pr4J8MlRe71-k1ecDlNDWomKPqzqDO4QMWPZg) NEW LINK

---

## Featured Item

![https://symfonystation.com/sites/default/files/inline-images/Featured-Item_1_0.png](https://symfonystation.com/sites/default/files/inline-images/Featured-Item_1_0.png)

We are tooting our own horn this week with our newest article. It is a follow-on to our article, [How Symfony components power Drupal’s drive to new frontiers](https://www.symfonystation.com/Symfony-Components-Drupal). We look at the nuts and bolts of four of the components/libraries Drupal uses, plus the Twig templating engine.

### **[How four Symfony Components + Twig help simplify Drupal Core](https://www.symfonystation.com/Symfony-Components-Twig-Drupal-Core)**

---

### This Week

Eternal Learner shows us how to:

[Dynamically Convert Request Content to DTO with Symfony](https://medium.com/@etearner/how-to-transform-request-content-to-dto-with-symfony-6-2-84c9c8543200)

Jmau continues a series:

[Symfony internals and security](https://dev.to/jmau111/symfony-internals-and-security-144b)

[What's the problem with my API?](https://dev.to/jmau111/whats-the-problem-with-my-api-ja7)

[Symfony's magic: dependency injection](https://dev.to/jmau111/symfonys-magic-dependency-injection-3id8)

Jarosław Szutkowski explores:

[Applying Content Security Policy in Symfony to Reduce XSS Risks](https://dev.to/jszutkowski/applying-content-security-policy-in-symfony-to-reduce-xss-risks-5a4l)

Nico Anastasio examines:

[Managing User Sessions in Symfony 6: A Beginner’s Guide PT2](https://medium.com/codex/managing-user-sessions-in-symfony-6-a-beginners-guide-pt2-f84d6ee158d6)

David Garcia looks at:

[Unlocking real-time capabilities in web applications with Symfony and Mercure](https://david-garcia.medium.com/unlocking-real-time-capabilities-in-web-applications-with-symfony-and-mercure-e67b964b4fee)

Frederic Leaux has:

[Tuto Symfony, 15 minutes pour mettre en place des tests automatiques qui vont vérifier toutes les…](https://medium.com/@fredericleaux/tuto-symfony-15-minutes-pour-mettre-en-place-des-tests-automatiques-qui-vont-v%C3%A9rifier-toutes-les-c753019cc877)

ProgWorld demonstrates:

[Automatic scaling of Symfony consumers in Kubernetes](https://prog.world/automatic-scaling-of-symfony-consumers-in-kubernetes-практическое-руководство/)

Markus Staab puts the the Symfony docs repo through a:

[Doctor Rst Speedup](https://staabm.github.io/2023/05/18/doctor-rst-speedup.html)

Nacho Colomina Torregrosa shares:

[Adding criteria to your doctrine queries easily](https://dev.to/icolomina/adding-criteria-to-your-doctrine-queries-easily-3llk)

### eCommerce

Lewis Blakeney opines:

[Magento vs. other eCommerce Platforms: Why Magento Development is the Best Choice](https://dev.to/lewisblakeney/magento-vs-other-ecommerce-platforms-why-magento-development-is-the-best-choice-53ln)

Inwebworks compares:

[Drupal Commerce vs. BigCommerce: Which One Is the Better Fit for Your Business?](https://www.lnwebworks.com/insight/bigcommerce-vs-drupal-commerce)

Lemberg Solutions:

[How to Integrate Apple Pay into Your Drupal Commerce shop?](https://lembergsolutions.com/blog/integrate-applepay-drupal-commerce-shop)

Ryan Szrama tells us:

[How to learn more about Drupal Commerce at DrupalCon Pittsburgh](https://ryanszrama.com/blog/05-16-2023/how-learn-more-about-drupal-commerce-drupalcon-pittsburgh)

**I agree with Ryan 2037%, and it’s why I am going to WordCamp US and not DrupalCon.**

### CMSs

Drupal Association provides a:

[Drupal GAAD Pledge 2023 Update](https://www.drupal.org/association/blog/drupal-gaad-pledge-2023-update)

ZYXware explores:

[Unlock the Power of Engaging Digital Experiences with Drupal 10](https://www.zyxware.com/article/6571/building-engaging-digital-experiences-with-drupal)

Gbyte explains:

[Hosting Drupal 9 & 10 Websites on NixOS - A Comprehensive Configuration Example](https://gbyte.dev/blog/host-drupal-9-10-website-nixos-comprehensive-configuration-example?language_content_entity=und)

Matt Glaman looks at:

[Simplifying the frontend developer experience in Drupal with a click of the button](https://mglaman.dev/blog/simplifying-frontend-developer-experience-drupal-click-button)

Specbee explores:

[Testing Drupal Websites for Accessibility with WCAG 2.1](https://www.specbee.com/blogs/testing-drupal-websites-for-accessibility-with-wcag)

Acquia shares:

[DrupalCon Survival Guide: Making the Most of Your Conference Experience](https://dev.acquia.com/blog/drupalcon-survival-guide-making-most-your-conference-experience)

Florida DrupalCamp speaks out on:

[Inclusion For All](https://www.fldrupal.camp/inclusion-all)

**In response to the continuing lurch toward fascism in the shithole state I live in, the organizers are adapting for next year.**

### Previous Weeks

Lucius Digital examines:

[Multilingual Drupal and Paragraphs | 4 essential tips](https://www.lucius.digital/en/blog/multilingual-drupal-and-paragraphs-4-essential-tips)

![https://symfonystation.com/sites/default/files/inline-images/php-logo_4.png](https://symfonystation.com/sites/default/files/inline-images/php-logo_4.png)

## PHP

### This Week

JetBrains announces:

[PhpStorm 2023.1.2 is released](https://blog.jetbrains.com/phpstorm/2023/05/phpstorm-2023-1-2-is-released/)

Miladev explores:

[Abstract Factory design pattern in PHP](https://medium.com/@miladev95/abstract-factory-design-pattern-in-php-e63dc0ad62aa)

[Command design pattern in PHP](https://medium.com/@miladev95/command-design-pattern-in-php-c43f1c54f06d)

[PHP Swoole](https://medium.com/@miladev95/php-swoole-4476df565e33)

Ramy Hakam examines:

[The Power of Remote Debugging for Developers](https://ramyhakam.medium.com/cothe-power-of-remote-debugging-for-developers-e136cd851996)

Charles Sprayberry looks at:

[Autowiring and Annotated Container](https://www.cspray.io/blog/autowiring-and-annotated-container/)

Zubair Idris Aweda explains:

[How Method Overloading Works in PHP](https://zubairidrisaweda.medium.com/how-method-overloading-works-in-php-7a051cbb045c)

And David Duymelinck responds with:

[PHP method overloading](https://dev.to/xwero/php-method-overloading-5epg)

**A rebuttal article!**

Nemanja Milenkovic is:

[Embracing the Power of PHP 8.0: The Match Expression](https://medium.com/@nemanjamilenkovic_58178/embracing-the-power-of-php-8-0-the-match-expression-814bea73a992)

Peter Hrobar demonstrates:

[Testing with PHPBench](https://dev.to/peter_hrobar_b781fa053702/testing-your-code-with-phpbench-2p1p)

London Lingo shares:

[PHP for DevOps: Automating Web Development](https://medium.com/@london.lingo.01/php-for-devops-automating-web-development-41b3e98d32fd)

### Previous Weeks

Alex explores:

[5 Bad Habits of PHP Developers (and How to Break Them)](https://alexwebdevelop.com/bad-habits-of-php-developers/)

![https://symfonystation.com/sites/default/files/inline-images/code-logo_3.jpeg](https://symfonystation.com/sites/default/files/inline-images/code-logo_3.jpeg)

## Other

[Please visit our Support Ukraine page](https://www.symfonystation.com/Support-Ukraine) to learn how you can help kick Russia out of Ukraine (eventually).

### The cyber response to Russia’s War Crimes and other douchebaggery

The New Statesman reports:

[From the front line of "the world's first cyberwar"](https://www.newstatesman.com/spotlight/cybersecurity/2023/05/ukraine-frontline-worlds-first-cyberwar-attacks)

AmpereSec reports;

[Energy workers in Ukraine battle to stay alive & keep digital snipers out of their networks — Ampere Industrial Security](https://www.amperesec.com/newsarchive/energy-workers-in-ukraine-battle-to-stay-alive)

Fast Company reports:

[Russians’ search histories contradict official polling on pro-war sentiment](https://www.fastcompany.com/90896846/russians-search-histories-contradict-official-polling-on-pro-war-sentiment)

CNN reports:

[US offers $10 million reward for info on Russian hacker accused of cyberattack on major US police department](https://www.cnn.com/2023/05/16/politics/us-reward-russian-hacker/)

**Of course, the mofo is in Russia, so this will come to nothing.**

Ars Technica reports:

[Malware turns home routers into proxies for Chinese state-sponsored hackers](https://arstechnica.com/information-technology/2023/05/malware-turns-home-routers-into-proxies-for-chinese-state-sponsored-hackers/)

### The Evil Empire Strikes Back

And:

[Twitter sued over Saudi spying that allegedly landed a popular user in prison](https://arstechnica.com/tech-policy/2023/05/twitter-sued-over-saudi-spying-that-allegedly-landed-popular-user-in-prison/)

The Associated Press reports:

[AI presents political peril for 2024 with a threat to mislead voters](https://apnews.com/article/artificial-intelligence-misinformation-deepfakes-2024-election-trump-59fb51002661ac5290089060b3ae39a0)

**I am sure Facebook, Twitter, and YouTube won’t let this happen. Not.**

Entrepreneur reports:

[Chinese Communist Party Had 'Supreme Access' to TikTok Parent Company
ByteDance's Data, Former Executive Says Yintao Yu, a former ByteDance
executive](https://www.entrepreneur.com/business-news/former-bytedance-exec-accuses-company-of-lawlessness/452164)

Wired reports:

[The UK’s Secretive Web Surveillance Program Is Ramping Up](https://www.wired.com/story/internet-connection-records-uk-surveillance/)

### Cybersecurity/Privacy

Fast Company reports:

[Researcher Meredith Whittaker says AI’s biggest risk isn’t ‘consciousness’—it’s the corporations that control them](https://www.fastcompany.com/90892235/researcher-meredith-whittaker-says-ais-biggest-risk-isnt-consciousness-its-the-corporations-that-control-them)

TechRadar reports:

[Hackers are using malicious Microsoft VS Code extensions to steal passwords](https://www.techradar.com/news/hackers-are-using-malicious-microsoft-vscode-extensions-to-steal-passwords)

Dark Reading shares:

[Microsoft Digital Defense Report: Nation-State Threats and Cyber Mercenaries](https://www.darkreading.com/microsoft/microsoft-digital-defense-report-nation-state-threats-and-cyber-mercenaries)

Forbes shares:

[An Overview Of Supply Chain Attacks And Protection Strategies](https://www.forbes.com/sites/davidbalaban/2023/05/13/an-overview-of-supply-chain-attacks-and-protection-strategies/)

The Washington Post reports:

[Cybersecurity faces a challenge from artificial intelligence’s rise](https://www.washingtonpost.com/technology/2023/05/11/hacking-ai-cybersecurity-future/)

Infoworld explores:

[Solving the SBOM crisis with WebAssembly components](https://www.infoworld.com/article/3694902/solving-the-sbom-crisis-with-webassembly-components.html)

ReadWrite opines:

[Forrester's No-Code Citizen Development Security Breach Prediction Misses the Mark](https://readwrite.com/forresters-no-code-citizen-development-security-breach-prediction-misses-the-mark/)

Bobby R demonstrates:

[The Dangers of Google’s .zip TLD](https://medium.com/@bobbyrsec/the-dangers-of-googles-zip-tld-5e1e675e59a5)

**It is mind-boggling how fucking stupid tech bros and big tech are.**

### More Programming

The Markup reports:

[Section 230 Just Survived a Brush with Death](https://themarkup.org/the-breakdown/2023/05/18/section-230-just-survived-a-brush-with-death)

**The Supreme C*nts decided not to fuck up the internet (and more importantly the Fediverse). For now.**

The NewStack reports:

[Developers Put AI Bots to the Test of Writing Code](https://thenewstack.io/developers-put-ai-bots-to-the-test-of-writing-code/)

Speaking of which, GitHub shares:

[How GitHub Copilot is getting better at ~~understanding~~ *stealing* your code](https://github.blog/2023-05-17-how-github-copilot-is-getting-better-at-understanding-your-code/)

**I fixed the headline.**

Fellow spirit and frontend demi-god Jason Knight has:

[Improving My HTML Video Facades](https://deathshadow.medium.com/improving-my-html-video-facades-264216223a63)

[Utility Classes And Atomic CSS. Predatory Propaganda Deflection!](https://deathshadow.medium.com/utility-classes-and-atomic-css-predatory-propaganda-deflection-808f31c3b0dc)

[Maybe That Code Isn’t “Clever”, Maybe You Aren’t!](https://deathshadow.medium.com/maybe-that-code-isnt-clever-maybe-you-aren-t-46d8ff144039)

Chris Ferdinandi asks:

[What's your problem with Tailwind?](https://gomakethings.com/whats-your-problem-with-tailwind/)

**Mine is that it sucks and is used by JavaScript bros who are too lazy (or ignorant - see article above) to learn how to use HTML and CSS properly.**

Smashing Mag examines:

[Solving Media Object Float Issues with CSS Block Formatting Contexts](https://www.smashingmagazine.com/2023/05/media-object-float-issues-css-block-formatting-contexts/)

Alan looks at:

[Building a Frontend Framework; Reactivity and Composability with Zero Dependencies](https://18alan.space/posts/how-hard-is-it-to-build-a-frontend-framework.html)

Attila Vágó says:

[Martin Fowler Was Right: Microservices Suck*](https://levelup.gitconnected.com/martin-fowler-was-right-microservices-suck-573bbf09a0fd)

The Hacker News reports:

[CLR SqlShell Malware Targets MS SQL Servers for Crypto Mining and Ransomware](https://thehackernews.com/2023/05/clr-sqlshell-malware-targets-ms-sql.html)

![Fediverse_logo.png](051923%20Communique%2089ac69b620dd442aba1c5ad3a2febb64/Fediverse_logo.png)

### Fediverse

The Fediverse Reports explores:

[Trends in Fediverse structure](https://fediversereport.com/trends-in-fediverse-structure/)

Open Indie looks at:

[Assembling Community OS](https://blog.erlend.sh/assembling-community-os)

CSS Demi-god Chri Coyier examines cross-posting social media:

[Cross-Posting](https://chriscoyier.net/2023/05/16/cross-posting/)

And David Rutland shows us:

[How to Use gomphotherium: A Complete Fediverse Client for Your Linux Terminal](https://www.makeuseof.com/use-gomphotherium-fediverse-client-linux/)

Speckyboy asks:

[Could Niche Web Communities Come Back?](https://speckyboy.com/niche-web-communities/)

**Let’s hope so.**

Anže Pečar examines:

[Mastodon Instances with Software Developers](https://dev.to/anze3db/mastodon-instances-with-software-developers-26om)

**Find your home in the Fediverse, as long as it’s not mastodon.social.**

## CTAs (aka show us some free love)

- That’s it for this week. Please share this communiqué.
- Also, be sure to [join our newsletter list at the bottom of our site’s pages](https://www.symfonystation.com/contact). Joining gets you each week's communiqué in your inbox (a day early).
- Follow us [on Flipboard](https://flipboard.com/@mobileatom/symfony-for-the-devil-allupr6jz) or at [@symfonystation@phpc.social](https://phpc.social/web/@symfonystation) on Mastodon for daily coverage. Consider joining the [@phpc.social](https://phpc.social/web/home) instance. If this communique is a little overwhelming, you can get a condensed weekly news highlight post on [Friendica](https://friendica.me/profile/friendofsymfony).
- Do you like Reddit? Follow us [on /kbin](https://kbin.social/u/symfonystation) for a better Fediverse and Symfony-based experience.

Do you own or work for an organization that would be interested in our promotion opportunities? Or supporting our journalistic efforts? If so, please get in touch with us. We’re in our infancy, so it’s extra economical. 😉

More importantly, if you are a Ukrainian company with coding-related products, we can offer free promotion on [our Support Ukraine page](https://www.symfonystation.com/Support-Ukraine). Or, if you know of one, get in touch.

Keep coding Symfonistas!

**[Visit our Communiqué Library](https://www.symfonystation.com/Communiqu%C3%A9s)**

You can find a vast array of curated evergreen content.

## Author

![https://miro.medium.com/max/1200/1*B3RcgIbAiytfjynP-oiOMg.jpeg](https://miro.medium.com/max/1200/1*B3RcgIbAiytfjynP-oiOMg.jpeg)

### Reuben Walker

Founder

Symfony Station