decole/symfony-flex-recipes
1
0
Fork 0
mirror of https://github.com/symfony/recipes.git synced 2026-09-12 07:36:30 +03:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1371 from symfony/autocomplete-off

Browse Source 
[stimulus-bundle] Use defaultValue to change the value of hidden CSRF fields
This commit is contained in:
Fabien Potencier
2025-01-06 11:15:05 +01:00
committed by GitHub
parent d061eb3c27 b14ca0650c
commit 7e10c1d078
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
symfony/stimulus-bundle/2.20/assets/controllers/csrf_protection_controller.js
+1 -1
View File
@@ -14,7 +14,7 @@ document.addEventListener('submit', function (event) {
if (!csrfCookie && nameCheck.test(csrfToken)) {
csrfField.setAttribute('data-csrf-protection-cookie-value', csrfCookie = csrfToken);
csrfField.value = csrfToken = btoa(String.fromCharCode.apply(null, (window.crypto || window.msCrypto).getRandomValues(new Uint8Array(18))));
csrfField.defaultValue = csrfToken = btoa(String.fromCharCode.apply(null, (window.crypto || window.msCrypto).getRandomValues(new Uint8Array(18))));
}
if (csrfCookie && tokenCheck.test(csrfToken)) {