diff --git a/reference/configuration/security.rst b/reference/configuration/security.rst index 903d07f8fe7..e4c856ad4bf 100644 --- a/reference/configuration/security.rst +++ b/reference/configuration/security.rst @@ -348,7 +348,14 @@ use_referer **type**: ``boolean`` **default**: ``false`` If ``true``, the user is redirected to the value stored in the ``HTTP_REFERER`` -header when no previous URL was stored in the session. +header when no previous URL was stored in the session. If the referrer URL is +the same as the one generated with the ``login_path`` route, the user is +redirected to the ``default_target_path`` to avoid a redirection loop. + +.. note:: + + For historical reasons, and to match the misspelling of the HTTP standard, + the option is called ``use_referer`` instead of ``use_referrer``. .. _reference-security-pbkdf2: