Move stateless CSRF config to packages/csrf.yaml

nicolas-grekas · nicolas-grekas · commit b06f1ce2f7c3 · 2024-11-20T13:18:41.000+01:00
diff --git a/symfony/form/7.2/config/packages/csrf.yaml b/symfony/form/7.2/config/packages/csrf.yaml
@@ -0,0 +1,11 @@
+# Enable stateless CSRF protection for forms and logins/logouts
+framework:
+    form:
+        csrf_protection:
+            token_id: submit
+
+    csrf_protection:
+        stateless_token_ids:
+            - submit
+            - authenticate
+            - logout
diff --git a/symfony/form/7.2/manifest.json b/symfony/form/7.2/manifest.json
@@ -0,0 +1,5 @@
+{
+    "copy-from-recipe": {
+        "config/": "%CONFIG_DIR%/"
+    }
+}
diff --git a/symfony/framework-bundle/7.2/config/packages/framework.yaml b/symfony/framework-bundle/7.2/config/packages/framework.yaml
@@ -8,11 +8,6 @@ framework:
     #esi: true
     #fragments: true
 
-    # Enable stateless CSRF protection for forms and logins/logouts
-    form: { csrf_protection: { token_id: submit } }
-    csrf_protection:
-        stateless_token_ids: [submit, authenticate, logout]
-
 when@test:
     framework:
         test: true

-Original file line number
+Diff line change
@@ @@ -0,0 +1,5 @@ @@
 +{
 +    "copy-from-recipe": {
 +        "config/": "%CONFIG_DIR%/"
 +    }
 +}