upd: csrf

add csrf protection for forms
2026-03-26 15:12:56 -04:00
parent 840058873a
commit c948b1e39d
1 changed files with 11 additions and 0 deletions
--- a/config/packages/csrf.yaml
+++ b/config/packages/csrf.yaml
@@ -0,0 +1,11 @@
+# Enable stateless CSRF protection for forms and logins/logouts
+framework:
+    form:
+        csrf_protection:
+            token_id: submit
+
+    csrf_protection:
+        stateless_token_ids:
+            - submit
+            - authenticate
+            - logout