Use correct filepaths

controller/service.rst

@@ -103,14 +103,14 @@ which is a common practice when following the `ADR pattern`_
 
     .. code-block:: yaml
 
-        # app/config/routing.yml
+        # config/routes.yaml
         hello:
             path:     /hello/{name}
             defaults: { _controller: app.hello_controller }
 
     .. code-block:: xml
 
-        <!-- app/config/routing.xml -->
+        <!-- config/routes.xml -->
         <?xml version="1.0" encoding="UTF-8" ?>
         <routes xmlns="http://symfony.com/schema/routing"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"

security/form_login_setup.rst

@@ -74,7 +74,7 @@ class that processes the login submit and 4) updates the main security config fi
         }
     }
 
-Edit the ``security.yml`` file in order to allow access for anyone to the
+Edit the ``security.yaml`` file in order to allow access for anyone to the
 ``/login`` route:
 
 .. configuration-block::

workflow.rst

@@ -46,7 +46,7 @@ like this:
 
     .. code-block:: yaml
 
-        # app/config/config.yml
+        # config/framework.yaml
         framework:
             workflows:
                 blog_publishing: