improve csrf handling (#2936)

2021-11-16 10:17:26 +01:00
parent a1992494d3
commit 95796ab256
15 changed files with 122 additions and 34 deletions
--- a/templates/customer/details.html.twig
+++ b/templates/customer/details.html.twig
@@ -139,7 +139,7 @@
    {% if comments is not null %}
        {% set options = {'form': commentForm, 'comments': comments} %}
        {% if can_edit %}
-            {% set options = options|merge({'route_pin': 'customer_comment_pin', 'route_delete': 'customer_comment_delete'}) %}
+            {% set options = options|merge({'route_pin': 'customer_comment_pin', 'route_delete': 'customer_comment_delete', 'csrf_delete': 'customer.delete_comment', 'csrf_pin': 'customer.pin_comment'}) %}
        {% endif %}
        {{ include('embeds/comments.html.twig', options) }}
    {% endif %}