Merge branch '3.4' into 4.3

* 3.4:
  [#12605] Transformed GET parameter notice to caution
  access_control.rst: query string is ignored

Author: wouterj

security/access_control.rst

@@ -139,6 +139,12 @@ if ``ip``, ``port``, ``host`` or ``method`` are not specified for an entry, that
 |                 |             |             |             |            |                                | URI doesn't match any of the ``path`` values.               |
 +-----------------+-------------+-------------+-------------+------------+--------------------------------+-------------------------------------------------------------+
 
+.. caution::
+
+    Matching the URI is done without ``$_GET`` parameters.
+    :ref:`Deny access in PHP code <security-securing-controller>` if you want
+    to disallow access based on ``$_GET`` parameter values.
+
 .. _security-access-control-enforcement-options:
 
 2. Access Enforcement