From 58a36789b54046a6886fc0f577d3c10a2d47a92c Mon Sep 17 00:00:00 2001
From: Hugo Alliaume <hugo@alliau.me>
Date: Sun, 27 Jul 2025 15:04:32 +0200
Subject: [PATCH] [Turbo] Correctly fix
 `framework.csrf_protection.check_header` configuration (#1440)

---
 symfony/ux-turbo/2.20/config/packages/ux_turbo.yaml |  4 ++++
 symfony/ux-turbo/2.20/manifest.json                 | 13 ++++---------
 2 files changed, 8 insertions(+), 9 deletions(-)
 create mode 100644 symfony/ux-turbo/2.20/config/packages/ux_turbo.yaml

diff --git a/symfony/ux-turbo/2.20/config/packages/ux_turbo.yaml b/symfony/ux-turbo/2.20/config/packages/ux_turbo.yaml
new file mode 100644
index 00000000..c2a6a44e
--- /dev/null
+++ b/symfony/ux-turbo/2.20/config/packages/ux_turbo.yaml
@@ -0,0 +1,4 @@
+# Enable stateless CSRF protection for forms and logins/logouts
+framework:
+    csrf_protection:
+        check_header: true
diff --git a/symfony/ux-turbo/2.20/manifest.json b/symfony/ux-turbo/2.20/manifest.json
index ec536fb5..7dd9f95e 100644
--- a/symfony/ux-turbo/2.20/manifest.json
+++ b/symfony/ux-turbo/2.20/manifest.json
@@ -2,17 +2,12 @@
     "bundles": {
         "Symfony\\UX\\Turbo\\TurboBundle": ["all"]
     },
+    "copy-from-recipe": {
+        "config/": "%CONFIG_DIR%/"
+    },
     "aliases": ["turbo"],
     "conflict": {
         "symfony/framework-bundle": "<7.2",
         "symfony/security-csrf": "<7.2"
-    },
-    "add-lines": [
-        {
-            "file": "config/packages/csrf.yaml",
-            "position": "after_target",
-            "target": "    csrf_protection:",
-            "content": "        check_header: true"
-        }
-    ]
+    }
 }