so the line before does not make this true, i guess we are trying to avoid the session to be passed via a GET, but the title of the issue and the PR make it sound a bit ambiguous. I say this because of the condition https://github.com/symfony/symfony/pull/10403/files#diff-9d63a61ac1b3720a090df6b1015822f2R725 I was expecting a true assertion.