>
> As for the redirect loop, not sure we can do much about that, except if we 
> enable anonymous access by default (aka requiring to disable it).
>
I don't know enough of the internals but couldn't we add additional 
parameter on login redirect? and if that parameter is present the next time 
throw an exception?

Regards,
miha

-- 
If you want to report a vulnerability issue on symfony, please send it to 
security at symfony-project.com

You received this message because you are subscribed to the Google
Groups "symfony developers" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/symfony-devs?hl=en

Reply via email to