Check if request is for RequestProtectedAccessType only on POST request

Novactive · Jul 5, 2024 · aca7d2c · aca7d2c
1 parent 11472ff
commit aca7d2c
Showing 1 changed file with 6 additions and 7 deletions.
diff --git a/components/ProtectedContentBundle/bundle/Listener/PasswordProvided.php b/components/ProtectedContentBundle/bundle/Listener/PasswordProvided.php
@@ -26,16 +26,15 @@ class PasswordProvided
     /**
      * @var FormFactoryInterface
      */
-    private $formFactory;
-
-    public function __construct(FormFactoryInterface $formFactory)
-    {
-        $this->formFactory = $formFactory;
-    }
+    public function __construct(private readonly FormFactoryInterface $formFactory)
+    { }
 
     public function onKernelRequest(RequestEvent $event): void
     {
-        if (!$event->isMasterRequest()) {
+        if (!$event->isMainRequest()) {
+            return;
+        }
+        if (!$event->getRequest()->isMethod('POST')) {
             return;
         }
         $form = $this->formFactory->create(RequestProtectedAccessType::class);