symfony/symfony — comment on commit 9d2ab9ca9c1762c529e053cefd39a5e626102133
File: src/Symfony/Bridge/Doctrine/Security/User/EntityUserProvider.php line 83
By beberlei:

Just to understand, this will still be a security problem if someone adds the "id" as hidden field through a form instead of going through a get parameter in the Url or?