Vlad Veselov

@buskamuza 2-5 why SHOULD and not MUST?

@Koc just mark `var` directory as excluded.

True, just noticed all but `var/generation` is excluded in my setup, looks like just always ignored them during search.

> I just ran PHPMD and after 104 mins I still have no sign of life from PHPMD. I don't think this is a valid use case :) The problem...

@tkacheva do you mean that SVG support can be just returned back or there needs to be a more sophisticated fix for a stored XSS vulnerability?

Looks like `up for grabs` from the past: https://github.com/magento/magento2/issues/1240#issuecomment-99625177

`--dev` in Composer should not be mixed with `developer` mode in Magento. I believe you are supposed to have separate `config.php` for each environment if you need separate sets of...

> how can we manage to do that if the `config.php` file is encouraged to keep under version control? Right, so we can have only `0` or `1` for each...