I had the issue too, then I print_r'ed the $parameters array in
SecretStep.php and found out that this one is using the real parameters.ini
file..
so just move your secret parameter to parameters.ini and use a placeholder
in the config.yml instead:
// parameters.ini:
secret=changemetosomething
// config.yml
framework:
charset: UTF-8
error_handler: null
secret: %secret%
csrf_protection:
enabled: true
--
If you want to report a vulnerability issue on symfony, please send it to
security at symfony-project.com
You received this message because you are subscribed to the Google
Groups "symfony users" group.
To post to this group, send email to symfony-users@googlegroups.com
To unsubscribe from this group, send email to
symfony-users+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/symfony-users?hl=en
