Skip to content

Conversation

jschaedl
Copy link
Contributor

I think using ...used to generate the token... here leads to misunderstanding.

The intention argument is not used to generate the csrf token. It is used to create a namespace string used to store and identify the token in the storage implementation.

@javiereguiluz javiereguiluz added this to the 4.4 milestone Feb 17, 2020
javiereguiluz added a commit that referenced this pull request Feb 17, 2020
This PR was merged into the 4.4 branch.

Discussion
----------

Adjusts description of the csrf_token extension

I think using `...used to generate the token...` here leads to misunderstanding.

The `intention` argument is not used to generate the csrf token. It is used to create a namespace string used to store and identify the token in the storage implementation.

Commits
-------

44df761 Adjusts description of the csrf_token extension
@javiereguiluz javiereguiluz merged commit 44df761 into symfony:4.4 Feb 17, 2020
@javiereguiluz
Copy link
Member

Thanks Jan for this and the other related PR.

javiereguiluz added a commit that referenced this pull request Feb 17, 2020
…edl)

This PR was merged into the 4.4 branch.

Discussion
----------

Adjusts description of the `csrf_token_id` option

See #13149

Commits
-------

c3fb633 Adjusts description of the `csrf_token_id` option
@jschaedl jschaedl deleted the patch-8 branch February 18, 2020 21:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants