decole/symfony-flex-recipes
1
0
Fork 0
mirror of https://github.com/symfony/recipes.git synced 2026-09-12 07:36:30 +03:00
Code Issues Packages Projects Releases Wiki Activity

[stimulus-bundle] Use defaultValue to change the value of hidden CSRF fields

Browse Source
This commit is contained in:
Nicolas Grekas
2025-01-06 09:38:30 +01:00
parent 5f3e6c55c6
commit b14ca0650c
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
symfony/stimulus-bundle/2.20/assets/controllers/csrf_protection_controller.js
+1 -1
View File
@@ -14,7 +14,7 @@ document.addEventListener('submit', function (event) {
if (!csrfCookie && nameCheck.test(csrfToken)) {
csrfField.setAttribute('data-csrf-protection-cookie-value', csrfCookie = csrfToken);
csrfField.value = csrfToken = btoa(String.fromCharCode.apply(null, (window.crypto || window.msCrypto).getRandomValues(new Uint8Array(18))));
csrfField.defaultValue = csrfToken = btoa(String.fromCharCode.apply(null, (window.crypto || window.msCrypto).getRandomValues(new Uint8Array(18))));
}
if (csrfCookie && tokenCheck.test(csrfToken)) {