Commit84634a2

committed

Reword

1 parenta1d7e49 commit84634a2Copy full SHA for 84634a2

File tree

-2

lines changed

-2

lines changed

Lines changed: 8 additions & 2 deletions

Original file line number	Diff line number	Diff line change
`@@ -288,8 +288,10 @@ object evaluated to the id::`
`288`	`288`	`// ... do something, like deleting an object`
`289`	`289`	`}`
`290`	`290`
`291`		-You can use the ``methods`` parameter to the attribute to specify the HTTP methods that are allowed for
`292`		-the token validation,:class:`Symfony\\Component\\Security\\Http\\Attribute\\IsCsrfTokenValid` is ignored for other methods. By default, the attribute allows all methods::
	`291`	+By default, the ``IsCsrfTokenValid`` attribute performs the CSRF token check for
	`292`	`+all HTTP methods. You can restrict this validation to specific methods using the`
	`293`	+``methods`` parameter. If the request uses a method not listed in the ``methods``
	`294`	`+array, the attribute is ignored for that request, and no CSRF validation occurs::`
`293`	`295`
`294`	`296`	`#[IsCsrfTokenValid('delete-item', tokenKey: 'token', methods: ['DELETE'])]`
`295`	`297`	`public function delete(Post $post): Response`
@@ -302,6 +304,10 @@ the token validation, :class:`Symfony\\Component\\Security\\Http\\Attribute\\IsC
`302`	`304`	The:class:`Symfony\\Component\\Security\\Http\\Attribute\\IsCsrfTokenValid`
`303`	`305`	`attribute was introduced in Symfony 7.1.`
`304`	`306`
	`307`	`+..versionadded::7.3`
	`308`	`+`
	`309`	+ The ``methods`` parameter was introduced in Symfony 7.3.
	`310`	`+`
`305`	`311`	`CSRF Tokens and Compression Side-Channel Attacks`
`306`	`312`	`------------------------------------------------`
`307`	`313`

Comments

(0)