minor #20530 Add data-controller="csrf-protection" to CSRF fields (nicolas-grekas)

javiereguiluz · javiereguiluz · commit 05f70ccb6184 · 2025-01-07T11:47:27.000+01:00
This PR was merged into the 6.4 branch. Discussion ---------- Add data-controller="csrf-protection" to CSRF fields Submitting on 6.4 so that the resulting apps can more easily be updated to 7.2 See symfony/symfony#59111 Commits ------- e818e12 Add data-controller="csrf-protection" to CSRF fields
diff --git a/security.rst b/security.rst
@@ -1028,7 +1028,7 @@ be ``authenticate``:
     <form action="{{ path('app_login') }}" method="post">
         {# ... the login fields #}
 
-        <input type="hidden" name="_csrf_token" value="{{ csrf_token('authenticate') }}">
+        <input type="hidden" name="_csrf_token" data-controller="csrf-protection" value="{{ csrf_token('authenticate') }}">
 
         <button type="submit">login</button>
     </form>
