Merge branch '6.2' into 6.3

* 6.2:
  Update link to HAL specification
  Add SensitiveParameter attribute in the security hardening list
  Fix "Login Programmatically" code example

Author: javiereguiluz

contributing/code/security.rst

@@ -22,8 +22,8 @@ email for confirmation):
   is set to ``true`` or ``APP_ENV`` set to anything but ``prod``);
 
 * Any fix that can be classified as **security hardening** like route
-  enumeration, login throttling bypasses, denial of service attacks, or timing
-  attacks.
+  enumeration, login throttling bypasses, denial of service attacks, timing
+  attacks, or lack of ``SensitiveParameter`` attributes.
 
 In any case, the core team has the final decision on which issues are
 considered security vulnerabilities.

security.rst

@@ -1648,16 +1648,16 @@ You can log in a user programmatically using the `login()` method of the
             $user = ...;
 
             // log the user in on the current firewall
-            $this->security->login($user);
+            $security->login($user);
 
             // if the firewall has more than one authenticator, you must pass it explicitly
             // by using the name of built-in authenticators...
-            $this->security->login($user, 'form_login');
+            $security->login($user, 'form_login');
             // ...or the service id of custom authenticators
-            $this->security->login($user, ExampleAuthenticator::class);
+            $security->login($user, ExampleAuthenticator::class);
 
             // you can also log in on a different firewall
-            $this->security->login($user, 'form_login', 'other_firewall');
+            $security->login($user, 'form_login', 'other_firewall');
 
             // ... redirect the user to its account page for instance
         }

serializer.rst

@@ -529,4 +529,4 @@ take a look at how this bundle works.
 .. _`OpenAPI`: https://www.openapis.org
 .. _`GraphQL`: https://graphql.org
 .. _`JSON:API`: https://jsonapi.org
-.. _`HAL`: http://stateless.co/hal_specification.html
+.. _`HAL`: https://stateless.group/hal_specification.html