Enable csrf protection

[blog] / config / packages / framework.yaml

diff --git a/config/packages/framework.yaml b/config/packages/framework.yaml
index 877eb25d15da47921c07414c3b5d3a333cf889ff..f64e9d06878ccbb91538ebcc7fbc02f11083230f 100644 (file)
--- a/config/packages/framework.yaml
+++ b/config/packages/framework.yaml
@@ -1,7 +1,7 @@
 # see https://symfony.com/doc/current/reference/configuration/framework.html
 framework:
     secret: '%env(APP_SECRET)%'
 # see https://symfony.com/doc/current/reference/configuration/framework.html
 framework:
     secret: '%env(APP_SECRET)%'

-    #csrf_protection: true
+    csrf_protection: true

 
     # Note that the session will be started ONLY if you read or write from it.
     session: true
 
     # Note that the session will be started ONLY if you read or write from it.
     session: true