mirror of
https://github.com/symfony/recipes.git
synced 2026-09-11 15:16:30 +03:00
[Turbo] Correctly fix framework.csrf_protection.check_header configuration (#1440)
This commit is contained in:
@@ -0,0 +1,4 @@
|
||||
# Enable stateless CSRF protection for forms and logins/logouts
|
||||
framework:
|
||||
csrf_protection:
|
||||
check_header: true
|
||||
@@ -2,17 +2,12 @@
|
||||
"bundles": {
|
||||
"Symfony\\UX\\Turbo\\TurboBundle": ["all"]
|
||||
},
|
||||
"copy-from-recipe": {
|
||||
"config/": "%CONFIG_DIR%/"
|
||||
},
|
||||
"aliases": ["turbo"],
|
||||
"conflict": {
|
||||
"symfony/framework-bundle": "<7.2",
|
||||
"symfony/security-csrf": "<7.2"
|
||||
},
|
||||
"add-lines": [
|
||||
{
|
||||
"file": "config/packages/csrf.yaml",
|
||||
"position": "after_target",
|
||||
"target": " csrf_protection:",
|
||||
"content": " check_header: true"
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user