Explained the edge-case where the use_referer option doesn't work

javiereguiluz · xabbuh · commit 7a7a842851dd · 2017-07-21T15:56:01.000+02:00
diff --git a/reference/configuration/security.rst b/reference/configuration/security.rst
@@ -348,7 +348,14 @@ use_referer
 **type**: ``boolean`` **default**: ``false``
 
 If ``true``, the user is redirected to the value stored in the ``HTTP_REFERER``
-header when no previous URL was stored in the session.
+header when no previous URL was stored in the session. If the referrer URL is
+the same as the one generated with the ``login_path`` route, the user is
+redirected to the ``default_target_path`` to avoid a redirection loop.
+
+.. note::
+
+    For historical reasons, and to match the misspelling of the HTTP standard,
+    the option is called ``use_referer`` instead of ``use_referrer``.
 
 .. _reference-security-pbkdf2:
 
