Skip to content

[Security] Update csrf.rst #20946

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
May 8, 2025
Merged

[Security] Update csrf.rst #20946

merged 1 commit into from
May 8, 2025

Conversation

@Chris53897
Copy link
Contributor

i have no deeper knowledge. I just get over this while try to fixing problems with csrf

Please check with
https://symfony.com/doc/7.3/security.html#csrf-protection-in-login-forms
@javiereguiluz javiereguiluz added this to the 6.4 milestone May 8, 2025
@carsonbot carsonbot changed the title Update csrf.rst [Security] Update csrf.rst May 8, 2025
@javiereguiluz javiereguiluz changed the base branch from 7.2 to 6.4 May 8, 2025 07:32
@javiereguiluz javiereguiluz requested a review from xabbuh as a code owner May 8, 2025 07:32
@javiereguiluz
Copy link
Member

Good catch. The default name of the parameter is indeed _csrf_token. See https://github.com/symfony/symfony/blob/171903303ced41c2ccef023f54b92c7d03064011/src/Symfony/Bundle/SecurityBundle/DependencyInjection/MainConfiguration.php#L247

We merged this in 6.4 and all the upper branches.
@javiereguiluz javiereguiluz merged commit 4dfa3ee into symfony:6.4 May 8, 2025
3 checks passed
@Chris53897 Chris53897 deleted the patch-3 branch May 8, 2025 07:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Security Status: Reviewed

3 participants

@Chris53897 @javiereguiluz @carsonbot