do not render hidden CSRF token forms with autocomplete set to off

symfony · Dec 24, 2024 · 092a893 · 092a893
1 parent 264cff3
commit 092a893
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/Extension/Csrf/Type/FormTypeCsrfExtension.php b/Extension/Csrf/Type/FormTypeCsrfExtension.php
@@ -76,7 +76,7 @@ public function finishView(FormView $view, FormInterface $form, array $options):
             $csrfForm = $factory->createNamed($options['csrf_field_name'], HiddenType::class, $data, [
                 'block_prefix' => 'csrf_token',
                 'mapped' => false,
-                'attr' => $this->fieldAttr + ['autocomplete' => 'off'],
+                'attr' => $this->fieldAttr,
             ]);
 
             $view->children[$options['csrf_field_name']] = $csrfForm->createView($view);