Info about CSRF protection #5663
Conversation
This should be explained *somewhere* (took me a while to figure it out). If this is not the right place (or format), please go ahead and correct it!
|
I would not explain this behaviour in the HttpFoundation component docs. The components section is meant to explain how to use components standalone. Thus, your changes are better suited in the book (like you did in #5664). Though we can check if we are in the need to add something like this to the Form component section. |
|
Since there is no chapter about session in the book (BTW: Why not?), this is the only session-related docs there are out there. And (as I said in the other Pull Request), the interplay between sessions and forms should be explained somewhere. Of course, I don't insist that here is the right place ;-) Cheers, |
|
With the note you added in #5664, I don't think we need anything more. For that reason, I'm going to close this PR for now. Feel free to comment if you don't agree. |
This should be explained somewhere (took me a while to figure it out). If this is not the right place (or format), please go ahead and correct it!