symfony/symfony — comment on commit 6d324a6ba023fbf9c6f7605dffd277ae55d6719b
File:  line 0
By Seldaek:

IMO that's ok because you can just make a decision whether you want to live with the insecure behavior or not. Having a flag in the parse method would be very hard since we would need to make it an option everywhere just for a couple guys that maybe rely on it.