From e818e1261943048b09487f2fb624adbf4d8f1730 Mon Sep 17 00:00:00 2001
From: Nicolas Grekas <nicolas.grekas@gmail.com>
Date: Mon, 6 Jan 2025 15:40:44 +0100
Subject: [PATCH] Add data-controller="csrf-protection" to CSRF fields

---
 security.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/security.rst b/security.rst
index ab4f48d6559..b725672dd5f 100644
--- a/security.rst
+++ b/security.rst
@@ -1028,7 +1028,7 @@ be ``authenticate``:
     <form action="{{ path('app_login') }}" method="post">
         {# ... the login fields #}
 
-        <input type="hidden" name="_csrf_token" value="{{ csrf_token('authenticate') }}">
+        <input type="hidden" name="_csrf_token" data-controller="csrf-protection" value="{{ csrf_token('authenticate') }}">
 
         <button type="submit">login</button>
     </form>