csrf_token now can be used without installing the Form component #9488
Conversation
|
|
||
| .. code-block:: terminal | ||
|
|
||
| $ composer require security-csrf form | ||
| $ composer require security-csrf |
There was a problem hiding this comment.
Do we now need to show how to install forms for the section where we integrate CSRF tokens into a Symfony form? Or is it too obvious that you do of course need the Form component for them?
There was a problem hiding this comment.
I agree with you that it would be too obvious to install form first because you are literally creating a Symfony Form in that section.
|
I think it's safe to assume that someone using Twig in a Symfony project has installed the TwigBundle which in turn pulls in the Twig bridge. |
|
Well, what of course could happen is that someone installs the Security CSRF component 4.1 while still using TwigBundle and TwigBridge 4.0. Do we need to take care of that? |
|
@xabbuh thanks for sharing these details. I'd say that we should not explain this info because it's like an edge case and unrelated to Symfony ... it's more about managing Composer dependencies in your project. |
|
@xabbuh I finally added a |
This fixes #9485.
@xabbuh in your original code (https://github.com/symfony/symfony/pull/25197/files) the function was added to Twig Bridge so ... could you please verify if installing just
security-csrfis enough to use this function or if we need to install some other package? Thanks!