From 84355eff4dd84293aa872402355479ac8cf888ee Mon Sep 17 00:00:00 2001
From: Robin Chalas <robin.chalas@gmail.com>
Date: Sat, 2 Jan 2021 17:06:12 +0100
Subject: [PATCH] [Security][Guard] Prevent user enumeration via response
 content

---
 Resources/config/guard.xml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/Resources/config/guard.xml b/Resources/config/guard.xml
index 43321494..9e27dcb5 100644
--- a/Resources/config/guard.xml
+++ b/Resources/config/guard.xml
@@ -17,7 +17,7 @@
                 <argument type="service" id="security.authentication.session_strategy" />
             </call>
         </service>
-        
+
         <service id="Symfony\Component\Security\Guard\GuardAuthenticatorHandler" alias="security.authentication.guard_handler" />
 
         <!-- See GuardAuthenticationFactory -->
@@ -41,6 +41,7 @@
             <argument /> <!-- Provider-shared Key -->
             <argument /> <!-- Authenticator -->
             <argument type="service" id="logger" on-invalid="null" />
+            <argument>%security.authentication.hide_user_not_found%</argument>
         </service>
     </services>
 </container>