diff --git a/session.rst b/session.rst index 57072dbdb37..399a3fab44a 100644 --- a/session.rst +++ b/session.rst @@ -239,6 +239,8 @@ Sessions are automatically started whenever you read, write or even check for the existence of data in the session. This may hurt your application performance because all users will receive a session cookie. In order to prevent that, you must *completely* avoid accessing the session. +By default, every Symfony form starts a session to store a CSRF token. To disable +this, see :doc:`CSRF Protection `. More about Sessions -------------------
Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.
Alternative Proxies: