Issues

• Code review findings (security, robustness, architecture): tracking issue

  Setono/SyliusConsentManagementPlugin#204 · Filter by author loevgaard opened on Sep 28, 2026

• Add tests for untested areas and fix misleading test names

  enhancement
  Setono/SyliusConsentManagementPlugin#203 · Filter by author loevgaard opened on Sep 28, 2026

• Rewrite the README

  enhancement
  Setono/SyliusConsentManagementPlugin#202 · Filter by author loevgaard opened on Sep 28, 2026

• Housekeeping: deprecated namespaces, dead code, half-used workflow, hardcoded strings, accessibility, fixtures

  enhancement
  Setono/SyliusConsentManagementPlugin#201 · Filter by author loevgaard opened on Sep 28, 2026

• Extensibility improvements: composite autoconfigure recursion, decorator-chain docs, category shortcut functions, grids

  enhancement
  Setono/SyliusConsentManagementPlugin#200 · Filter by author loevgaard opened on Sep 28, 2026

• Make hardcoded tunables configurable and validate the existing config

  enhancement
  Setono/SyliusConsentManagementPlugin#199 · Filter by author loevgaard opened on Sep 28, 2026

• Render resources and widget through Sylius template events so no layout override is needed

  enhancement
  Setono/SyliusConsentManagementPlugin#198 · Filter by author loevgaard opened on Sep 28, 2026

• Tighten dependency constraints

  dependencies
  Setono/SyliusConsentManagementPlugin#197 · Filter by author loevgaard opened on Sep 28, 2026

• Make the crawler optional by moving Panther, WebDriver and bdi out of require

  dependenciesenhancement
  Setono/SyliusConsentManagementPlugin#196 · Filter by author loevgaard opened on Sep 28, 2026

• Let visitors reopen the widget and withdraw consent

  enhancement
  Setono/SyliusConsentManagementPlugin#195 · Filter by author loevgaard opened on Sep 28, 2026

• Add a "Reject all" button to the consent widget

  enhancement
  Setono/SyliusConsentManagementPlugin#194 · Filter by author loevgaard opened on Sep 28, 2026

• Add retention for consent data (IP address, user agent)

  enhancement
  Setono/SyliusConsentManagementPlugin#193 · Filter by author loevgaard opened on Sep 28, 2026

• Make consent records append-only and versioned, and ask again when categories change

  enhancement
  Setono/SyliusConsentManagementPlugin#192 · Filter by author loevgaard opened on Sep 28, 2026

• Add missing database indexes

  enhancement
  Setono/SyliusConsentManagementPlugin#191 · Filter by author loevgaard opened on Sep 28, 2026

• Reduce database queries on the shop hot path

  enhancement
  Setono/SyliusConsentManagementPlugin#190 · Filter by author loevgaard opened on Sep 28, 2026

• JavaScript robustness issues in the consent manager and widget

  bug
  Setono/SyliusConsentManagementPlugin#189 · Filter by author loevgaard opened on Sep 28, 2026

• Statistics result cache never hits

  bug
  Setono/SyliusConsentManagementPlugin#188 · Filter by author loevgaard opened on Sep 28, 2026

• SampleController silently depends on FOSRestBundle to decode JSON

  bug
  Setono/SyliusConsentManagementPlugin#187 · Filter by author loevgaard opened on Sep 28, 2026

• Notification emails: broken markup, uncaught mailer errors, and sending before the transaction commits

  bug
  Setono/SyliusConsentManagementPlugin#186 · Filter by author loevgaard opened on Sep 28, 2026

• Shop GET requests insert WidgetConfig and Category rows, which races on fresh installs

  bug
  Setono/SyliusConsentManagementPlugin#183 · Filter by author loevgaard opened on Sep 28, 2026

• Crawler builds broken URLs for channels with a hostname, and one failure aborts the whole crawl

  bug
  Setono/SyliusConsentManagementPlugin#182 · Filter by author loevgaard opened on Sep 28, 2026

• Server-side sampling records PHP-mangled cookie names

  bug
  Setono/SyliusConsentManagementPlugin#181 · Filter by author loevgaard opened on Sep 28, 2026

• Cookie.url is VARCHAR(255) but stores full request URLs

  bug
  Setono/SyliusConsentManagementPlugin#180 · Filter by author loevgaard opened on Sep 28, 2026

• Server-side cookie sampling writes to the DB inside kernel.request and can turn page views into 500 errors

  bug
  Setono/SyliusConsentManagementPlugin#179 · Filter by author loevgaard opened on Sep 28, 2026

• [Security] Harden output escaping in Twig functions and admin templates

  bug
  Setono/SyliusConsentManagementPlugin#177 · Filter by author loevgaard opened on Sep 28, 2026