[Turbo] Correctly fix framework.csrf_protection.check_header configuration (#1440)

This commit is contained in:
Hugo Alliaume
2025-07-27 15:04:32 +02:00
committed by GitHub
parent 87f1e0b3f9
commit 58a36789b5
2 changed files with 8 additions and 9 deletions
@@ -0,0 +1,4 @@
# Enable stateless CSRF protection for forms and logins/logouts
framework:
csrf_protection:
check_header: true
+4 -9
View File
@@ -2,17 +2,12 @@
"bundles": {
"Symfony\\UX\\Turbo\\TurboBundle": ["all"]
},
"copy-from-recipe": {
"config/": "%CONFIG_DIR%/"
},
"aliases": ["turbo"],
"conflict": {
"symfony/framework-bundle": "<7.2",
"symfony/security-csrf": "<7.2"
},
"add-lines": [
{
"file": "config/packages/csrf.yaml",
"position": "after_target",
"target": " csrf_protection:",
"content": " check_header: true"
}
]
}
}