diff --git a/packages/realtime-compiler/src/Http/BaseController.php b/packages/realtime-compiler/src/Http/BaseController.php
index 385e2d534a4..991c8f694bb 100644
--- a/packages/realtime-compiler/src/Http/BaseController.php
+++ b/packages/realtime-compiler/src/Http/BaseController.php
@@ -86,7 +86,7 @@ protected function isRequestMadeFromLocalhost(): bool
         return in_array($requestIp, $allowedIps, true);
     }
 
-    protected function generateCSRFToken(): string
+    protected static function generateCSRFToken(): string
     {
         if (empty($_SESSION['csrf_token'])) {
             $_SESSION['csrf_token'] = bin2hex(random_bytes(32));