Skip to content

Commit

Permalink
Merge pull request #56 from davidfuhr/security-doc
Browse files Browse the repository at this point in the history
[Doc] Add doc for csrf_token modifier
  • Loading branch information
vitorbrandao committed May 7, 2016
2 parents b23833d + 2ae1e2c commit 34e6e6e
Showing 1 changed file with 9 additions and 0 deletions.
9 changes: 9 additions & 0 deletions Resources/doc/extensions.rst
Original file line number Diff line number Diff line change
Expand Up @@ -191,6 +191,15 @@ that method is invented for this example).

For more details on expressions and security, see the section `Complex Access Controls with Expressions <http://symfony.com/doc/current/book/security.html#book-security-expressions>`_ in the Symfony book.

Using CSRF Protection in the Login Form
---------------------------------------

The security extension also adds a modifer to support CSRF Protection in login forms. Please read `Using CSRF Protection in the Login Form <http://symfony.com/doc/current/cookbook/security/csrf_in_login_form.html>`_ from the Symfony Documentation for general CSRF Protection setup. The template for rendering should look like this:

.. code-block:: html+smarty

<input type="hidden" name="_csrf_token" value="{'authenticate'|csrf_token}">
Enabling custom Extensions
==========================

Expand Down

0 comments on commit 34e6e6e

Please sign in to comment.