Remove mail and hash possible leak from failure_path context

[userbundle] / Resources / config / routes / rapsys_user.yaml

diff --git a/Resources/config/routes/rapsys_user.yaml b/Resources/config/routes/rapsys_user.yaml
index e2af83c8747bf5348300bc0890e62990422296bd..304077065595e1b3f333232c2011987c9b170d03 100644 (file)
--- a/Resources/config/routes/rapsys_user.yaml
+++ b/Resources/config/routes/rapsys_user.yaml
@@ -1,20 +1,28 @@
 rapsys_user_confirm:
     path: /confirm/{hash}/{mail}
 rapsys_user_confirm:
     path: /confirm/{hash}/{mail}

-    controller: Rapsys\UserBundle\Controller\DefaultController::registerMail
+    controller: Rapsys\UserBundle\Controller\UserController::registerMail

     requirements:
     requirements:

+        hash: '[a-zA-Z0-9=_-]+'

         mail: '[a-zA-Z0-9=_-]+'
         mail: '[a-zA-Z0-9=_-]+'

+    methods: GET|POST
+
+rapsys_user_edit:
+    path: /user/{hash}/{mail}
+    controller: Rapsys\UserBundle\Controller\UserController::edit
+    requirements:

         hash: '[a-zA-Z0-9=_-]+'
         hash: '[a-zA-Z0-9=_-]+'

+        mail: '[a-zA-Z0-9=_-]+'

     methods: GET|POST
 
 rapsys_user_login:
     path: /login/{hash}/{mail}
     methods: GET|POST
 
 rapsys_user_login:
     path: /login/{hash}/{mail}

-    controller: Rapsys\UserBundle\Controller\DefaultController::login
+    controller: Rapsys\UserBundle\Controller\UserController::login

     defaults:
     defaults:

-        mail: ~

         hash: ~
         hash: ~

+        mail: ~

     requirements:
     requirements:

-        mail: '[a-zA-Z0-9=_-]+'

         hash: '[a-zA-Z0-9=_-]+'
         hash: '[a-zA-Z0-9=_-]+'

+        mail: '[a-zA-Z0-9=_-]+'

     methods: GET|POST
 
 rapsys_user_logout:
     methods: GET|POST
 
 rapsys_user_logout:


@@ -23,38 +31,23 @@ rapsys_user_logout:
 
 rapsys_user_recover:
     path: /recover/{hash}/{pass}/{mail}
 
 rapsys_user_recover:
     path: /recover/{hash}/{pass}/{mail}

-    controller: Rapsys\UserBundle\Controller\DefaultController::recover
+    controller: Rapsys\UserBundle\Controller\UserController::recover

     defaults:
     defaults:

-        mail: ~
-        pass: ~

         hash: ~
         hash: ~

-    requirements:
-        mail: '[a-zA-Z0-9=_-]+'
-        pass: '[a-zA-Z0-9=_-]+'
-        hash: '[a-zA-Z0-9=_-]+'
-    methods: GET|POST
-
-rapsys_user_register:
-    path: /register/{hash}/{field}/{mail}
-    controller: Rapsys\UserBundle\Controller\DefaultController::register
-    defaults:
+        pass: ~

         mail: ~
         mail: ~

-        field: ~
-        hash: ~

     requirements:
     requirements:

-        mail: '[a-zA-Z0-9=_-]+'
-        field: '[a-zA-Z0-9=_-]+'

         hash: '[a-zA-Z0-9=_-]+'
         hash: '[a-zA-Z0-9=_-]+'

+        pass: '[a-zA-Z0-9=_-]+'
+        mail: '[a-zA-Z0-9=_-]+'

     methods: GET|POST
 
     methods: GET|POST
 

-rapsys_user_edit:
-    path: /user/{hash}/{mail}
-    controller: Rapsys\UserBundle\Controller\DefaultController::edit
-    requirements:
-        mail: '[a-zA-Z0-9=_-]+'
-        hash: '[a-zA-Z0-9=_-]+'
+rapsys_user_register:
+    path: /register
+    controller: Rapsys\UserBundle\Controller\UserController::register

     methods: GET|POST
 
     methods: GET|POST
 

-rapsys_user_index:
+rapsys_user:

     path: /
     path: /

+    controller: Rapsys\UserBundle\Controller\UserController::index

     methods: GET
     methods: GET