Merge branch '3.4' into 4.4

* 3.4: [Security][Guard] Prevent user enumeration via response content
symfony · May 12, 2021 · a2416b9 · a2416b9
2 parents e9cf8e6 + 84355ef
commit a2416b9
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/Resources/config/guard.xml b/Resources/config/guard.xml
@@ -17,7 +17,7 @@
                 <argument type="service" id="security.authentication.session_strategy" />
             </call>
         </service>
-        
+
         <service id="Symfony\Component\Security\Guard\GuardAuthenticatorHandler" alias="security.authentication.guard_handler" />
 
         <!-- See GuardAuthenticationFactory -->
@@ -42,6 +42,7 @@
             <argument /> <!-- Provider-shared Key -->
             <argument /> <!-- Authenticator -->
             <argument type="service" id="logger" on-invalid="null" />
+            <argument>%security.authentication.hide_user_not_found%</argument>
         </service>
     </services>
 </container>