diff --git a/symfony/ux-turbo/2.20/config/packages/ux_turbo.yaml b/symfony/ux-turbo/2.20/config/packages/ux_turbo.yaml new file mode 100644 index 000000000..c2a6a44e7 --- /dev/null +++ b/symfony/ux-turbo/2.20/config/packages/ux_turbo.yaml @@ -0,0 +1,4 @@ +# Enable stateless CSRF protection for forms and logins/logouts +framework: + csrf_protection: + check_header: true diff --git a/symfony/ux-turbo/2.20/manifest.json b/symfony/ux-turbo/2.20/manifest.json index ec536fb50..7dd9f95e1 100644 --- a/symfony/ux-turbo/2.20/manifest.json +++ b/symfony/ux-turbo/2.20/manifest.json @@ -2,17 +2,12 @@ "bundles": { "Symfony\\UX\\Turbo\\TurboBundle": ["all"] }, + "copy-from-recipe": { + "config/": "%CONFIG_DIR%/" + }, "aliases": ["turbo"], "conflict": { "symfony/framework-bundle": "<7.2", "symfony/security-csrf": "<7.2" - }, - "add-lines": [ - { - "file": "config/packages/csrf.yaml", - "position": "after_target", - "target": " csrf_protection:", - "content": " check_header: true" - } - ] + } }