I think that the main problem is that the resource is not in the right path or it's a webserver misconfiguration.
For static resources there is a rule in the .htaccess distributed with symfony to not process paths that have a dot in them: http://svn.symfony-project.com/branches/1.4/lib/task/generator/skeleton/project/web/.htaccess <http://svn.symfony-project.com/branches/1.4/lib/task/generator/skeleton/project/web/.htaccess> # we skip all files with .something RewriteCond %{REQUEST_URI} \..+$ RewriteCond %{REQUEST_URI} !\.html$ RewriteRule .* - [L] So you should not get a 404 or security error by symfony but a simple 404 sent by the web server. gabriel -- If you want to report a vulnerability issue on symfony, please send it to security at symfony-project.com You received this message because you are subscribed to the Google Groups "symfony users" group. To post to this group, send email to symfony-users@googlegroups.com To unsubscribe from this group, send email to symfony-users+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/symfony-users?hl=en