[Security] Only redirect to urls called with http method GET

2012-06-14 13:33:25 +02:00 · 2012-06-14 13:33:25 +02:00 · 3ce8227a9b
commit 3ce8227a9b
parent 4e1e08eff7
1 changed files with 1 additions and 1 deletions
--- a/src/Symfony/Component/Security/Http/Firewall/ExceptionListener.php
+++ b/src/Symfony/Component/Security/Http/Firewall/ExceptionListener.php
@ -172,7 +172,7 @@ class ExceptionListener
    protected function setTargetPath(Request $request)
    {
        // session isn't required when using http basic authentication mechanism for example
-        if ($request->hasSession()) {
+        if ($request->hasSession() && 'GET' == $request->getMethod()) {
            $request->getSession()->set('_security.target_path', $request->getUri());
        }
    }