Move stateless CSRF config to packages/csrf.yaml

2026-09-12 07:36:30 +03:00 · 2024-11-20 13:18:41 +01:00
parent fc87603199
commit b06f1ce2f7
3 changed files with 16 additions and 5 deletions
@@ -8,11 +8,6 @@ framework:
    #esi: true
    #fragments: true

-    # Enable stateless CSRF protection for forms and logins/logouts
-    form: { csrf_protection: { token_id: submit } }
-    csrf_protection:
-        stateless_token_ids: [submit, authenticate, logout]
-
 when@test:
    framework:
        test: true