From b4f0e0439a8f1119be34ad8720f2db071c44de9f Mon Sep 17 00:00:00 2001
From: Javier Eguiluz <javier.eguiluz@gmail.com>
Date: Wed, 16 Jun 2021 17:19:05 +0200
Subject: [PATCH] [Form] Fixed a code example related to CSRF

---
 components/form.rst | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/components/form.rst b/components/form.rst
index 7ac59478ceb..86a98d48d35 100644
--- a/components/form.rst
+++ b/components/form.rst
@@ -121,16 +121,17 @@ The following snippet adds CSRF protection to the form factory::
 
     use Symfony\Component\Form\Extension\Csrf\CsrfExtension;
     use Symfony\Component\Form\Forms;
-    use Symfony\Component\HttpFoundation\Session\Session;
+    use Symfony\Component\HttpFoundation\RequestStack;
     use Symfony\Component\Security\Csrf\CsrfTokenManager;
     use Symfony\Component\Security\Csrf\TokenGenerator\UriSafeTokenGenerator;
     use Symfony\Component\Security\Csrf\TokenStorage\SessionTokenStorage;
 
-    // creates a Session object from the HttpFoundation component
-    $session = new Session();
+    // creates a RequestStack object using the current request
+    $requestStack = new RequestStack();
+    $requestStack->push($request);
 
     $csrfGenerator = new UriSafeTokenGenerator();
-    $csrfStorage = new SessionTokenStorage($session);
+    $csrfStorage = new SessionTokenStorage($requestStack);
     $csrfManager = new CsrfTokenManager($csrfGenerator, $csrfStorage);
 
     $formFactory = Forms::createFormFactoryBuilder()