Exponential Platform Legacy v4.6.23.3

A release of the 4.6 line (branch 4.6.x: Symfony 5.4 LTS, se7enxweb/exponential-platform-dxp 4.6, LegacyBridge 4, Netgen Layouts 1.4, the Exponential 6 legacy kernel). It makes TRUSTED_PROXIES work, corrects the installation guide and README, and ships the book.

:::bash
composer create-project se7enxweb/exponential-platform-legacy:~4.6.23.3 my_project

Fixes in the code and configuration

• TRUSTED_PROXIES sets the proxies Symfony trusts (309785f). The .env this line installs sets it, but nothing read it: Symfony's default reads SYMFONY_TRUSTED_PROXIES. The new config/packages/trusted_proxies.yaml reads TRUSTED_PROXIES and trusts X-Forwarded-For, -Proto and -Port from those proxies. A project created from v4.6.23.2 or earlier does not have the file; create it with the content of the commit (chapter 13.9 of the book).

Still open on this line, from the Flex recipe rather than this repository: the recipe's public/.htaccess forces APP_ENV=dev, and its legacy settings switch DebugOutput on. Chapter 13.4 of the book shows what to change in your project before going live.

Documentation

• The book in doc/book/, thirteen chapters on all four release lines, and a copy of master's short installation guide in doc/INSTALL.md, each with a note on which branch the copy is on (eae045e); the newest copies are on master. The README has a documentation section (250fb2a).
• The guides use legacy commands that exist: there is no ezpublish:legacy:clear-cache or ezpublish:legacy:generate-autoloads in any LegacyBridge release. The guides now run bin/php/ezcache.php and bin/php/ezpgenerateautoloads.php through ezpublish:legacy:script, the name every bridge release this line allows has (v4.0.0.0 and v4.0.0.1 do not know the exponential:legacy:* names), and run the legacy cronjobs through the bridge (36bea49, 17db8d6, 4edf8a6).
• The git clone section checks out 4.6.x instead of 3.x, over HTTPS (058646c).
• The database user is created with CREATE USER before GRANT; MySQL 8.0 rejects GRANT ... IDENTIFIED BY (71fec70).
• The README builds the Admin UI with yarn ibexa:build; yarn ez does not exist on this line (eb63593).
• The branch carries the security policy, and the README names security@se7enx.com (b24357c, 01ab64b).
• The guide says what reads TRUSTED_PROXIES (a34bbc0).

Full list of changes: https://github.com/se7enxweb/exponential-platform-legacy/compare/v4.6.23.2...v4.6.23.3