diff --git a/security.rst b/security.rst
index ab4f48d6559..b725672dd5f 100644
--- a/security.rst
+++ b/security.rst
@@ -1028,7 +1028,7 @@ be ``authenticate``:
     <form action="{{ path('app_login') }}" method="post">
         {# ... the login fields #}
 
-        <input type="hidden" name="_csrf_token" value="{{ csrf_token('authenticate') }}">
+        <input type="hidden" name="_csrf_token" data-controller="csrf-protection" value="{{ csrf_token('authenticate') }}">
 
         <button type="submit">login</button>
     </form>