From ba5cfc884fd4954c9e731b83b1eb1b10667f0dbc Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Nu=C5=A1a=20Puk=C5=A1i=C4=8D?= <nusa.puksic@gmail.com>
Date: Tue, 14 Oct 2025 21:23:18 +0200
Subject: [PATCH] Csrf

---
 config/packages/csrf.yaml | 11 +++++++++++
 1 file changed, 11 insertions(+)
 create mode 100644 config/packages/csrf.yaml

diff --git a/config/packages/csrf.yaml b/config/packages/csrf.yaml
new file mode 100644
index 0000000..40d4040
--- /dev/null
+++ b/config/packages/csrf.yaml
@@ -0,0 +1,11 @@
+# Enable stateless CSRF protection for forms and logins/logouts
+framework:
+    form:
+        csrf_protection:
+            token_id: submit
+
+    csrf_protection:
+        stateless_token_ids:
+            - submit
+            - authenticate
+            - logout