Merge branch '6.4' into 7.1

javiereguiluz · javiereguiluz · commit 133ce567af48 · 2025-01-07T11:47:46.000+01:00
* 6.4:
  Add data-controller="csrf-protection" to CSRF fields
diff --git a/security.rst b/security.rst
@@ -1016,7 +1016,7 @@ be ``authenticate``:
     <form action="{{ path('app_login') }}" method="post">
         {# ... the login fields #}
 
-        <input type="hidden" name="_csrf_token" value="{{ csrf_token('authenticate') }}">
+        <input type="hidden" name="_csrf_token" data-controller="csrf-protection" value="{{ csrf_token('authenticate') }}">
 
         <button type="submit">login</button>
     </form>
