Eanble CSRF protection on forms

MbinOrg · Sep 13, 2024 · 7e5d833 · 7e5d833
1 parent b56e53c
commit 7e5d833
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/config/packages/framework.yaml b/config/packages/framework.yaml
@@ -13,6 +13,10 @@ framework:
             'x-forwarded-prefix',
         ]
 
+    form:
+        csrf_protection:
+            enabled: true
+
     # Enables session support. Note that the session will ONLY be started if you read or write from it.
     # Remove or comment this section to explicitly disable session support.
     session: