Remove hard coded _token field

This commit is contained in:
Kacper Kubacki 2025-09-01 09:27:27 +02:00 committed by Michał Kaczmarek
parent f4add488e4
commit f65c47a900
37 changed files with 21 additions and 35 deletions

View file

@ -8,7 +8,6 @@
<input type="hidden" name="_method" value="{{ hookable_metadata.configuration.method }}" />
{% endif %}
{{ form_errors(form) }}
{{ form_widget(form._token) }}
{% hook 'form' with { form } %}

View file

@ -8,7 +8,6 @@
<input type="hidden" name="_method" value="{{ hookable_metadata.configuration.method }}" />
{% endif %}
{{ form_errors(form) }}
{{ form_widget(form._token) }}
{% hook 'form' with { form } %}
{{ form_end(form, {render_rest: false}) }}

View file

@ -6,7 +6,6 @@
<input type="hidden" name="_method" value="{{ hookable_metadata.configuration.method }}" />
{% endif %}
{{ form_errors(form) }}
{{ form_widget(form._token) }}
{% hook 'form' with { form } %}

View file

@ -8,7 +8,6 @@
<input type="hidden" name="_method" value="{{ hookable_metadata.configuration.method }}" />
{% endif %}
{{ form_errors(form) }}
{{ form_widget(form._token) }}
{% hook 'form' with { form } %}

View file

@ -10,7 +10,6 @@
<input type="hidden" name="_method" value="{{ configuration.method }}" />
{% endif %}
{{ form_errors(form) }}
{{ form_widget(form._token) }}
{% hook 'form' with { form } %}

View file

@ -9,7 +9,6 @@
<input type="hidden" name="_method" value="{{ hookable_metadata.configuration.method }}" />
{% endif %}
{{ form_errors(form) }}
{{ form_widget(form._token) }}
{% hook 'form' with {
mapped_product_attributes,

View file

@ -8,7 +8,6 @@
<input type="hidden" name="_method" value="{{ hookable_metadata.configuration.method }}" />
{% endif %}
{{ form_errors(form) }}
{{ form_widget(form._token) }}
{% hook 'form' with { form } %}

View file

@ -9,7 +9,6 @@
{% if hookable_metadata.configuration.method is defined %}
<input type="hidden" name="_method" value="{{ hookable_metadata.configuration.method }}" />
{% endif %}
{{ form_widget(form._token) }}
{% hook 'form' with { form } %}
</div>

View file

@ -8,7 +8,6 @@
<input type="hidden" name="_method" value="{{ hookable_metadata.configuration.method }}" />
{% endif %}
{{ form_errors(form) }}
{{ form_widget(form._token) }}
{% hook 'form' with { form } %}

View file

@ -7,7 +7,6 @@
<input type="hidden" name="_method" value="{{ hookable_metadata.configuration.method }}" />
{% endif %}
{{ form_errors(form, sylius_test_form_attribute('form-validation-errors')) }}
{{ form_widget(form._token) }}
{% hook 'form' with { form, resource } %}
</div>

View file

@ -8,7 +8,6 @@
<input type="hidden" name="_method" value="{{ hookable_metadata.configuration.method }}" />
{% endif %}
{{ form_errors(form) }}
{{ form_widget(form._token) }}
{% hook 'form' with { form } %}

View file

@ -4,7 +4,6 @@
{{ form_start(form, {'attr': {'novalidate': 'novalidate', 'id': form.vars.id}}) }}
<div class="row">
{{ form_errors(form) }}
{{ form_widget(form._token) }}
{% hook 'form' with { form } %}
</div>

View file

@ -4,5 +4,4 @@
{{ form_start(form, {'action': path('sylius_admin_request_password_reset'), 'attr': {'class': 'ui large loadable form', 'novalidate': 'novalidate'}}) }}
{% hook 'form' with { form } %}
{{ form_row(form._token) }}
{{ form_end(form, {'render_rest': false}) }}

View file

@ -4,5 +4,4 @@
{{ form_start(form, {'action': path('sylius_admin_password_reset', {'token': app.request.attributes.get('token')}), 'attr': {'class': 'ui large loadable form', 'novalidate': 'novalidate'}}) }}
{% hook 'form' with { form } %}
{{ form_row(form._token) }}
{{ form_end(form, {'render_rest': false}) }}

View file

@ -17,7 +17,6 @@
<input type="hidden" name="_method" value="PUT"/>
{% endif %}
{{ form_errors(form) }}
{{ form_widget(form._token) }}
{% hook 'form' with { form, resource } %}
</div>

View file

@ -87,3 +87,12 @@
{% set attr = attr|merge({'class': (attr.class|default('') ~ ' btn btn-outline-primary')|trim}) %}
{{ parent() }}
{%- endblock -%}
{%- block form_end -%}
{% for child in form %}
{% if 'csrf_token' in child.vars.block_prefixes and child.rendered == false %}
{{ form_row(child) }}
{% endif %}
{% endfor %}
</form>
{%- endblock form_end -%}

View file

@ -16,7 +16,6 @@
{{ 'sylius.ui.ship'|trans }}
</button>
</div>
{{ form_row(form._token) }}
{{ form_end(form, {'render_rest': false}) }}
</div>
{% endif %}

View file

@ -9,7 +9,6 @@
<input type="hidden" name="_method" value="{{ hookable_metadata.configuration.method }}" />
{% endif %}
{{ form_errors(form) }}
{{ form_widget(form._token) }}
{% hook 'form' with { form } %}
</div>

View file

@ -8,7 +8,6 @@
<input type="hidden" name="_method" value="{{ hookable_metadata.configuration.method }}" />
{% endif %}
{{ form_errors(form) }}
{{ form_widget(form._token) }}
{% hook 'form' with { form } %}

View file

@ -8,7 +8,6 @@
<input type="hidden" name="_method" value="{{ hookable_metadata.configuration.method }}" />
{% endif %}
{{ form_errors(form) }}
{{ form_widget(form._token) }}
{% hook 'form' with { form } %}

View file

@ -10,6 +10,5 @@
{% hook 'form' with { form } %}
{{ form_row(form._token) }}
{{ form_end(form, {'render_rest': false}) }}
</div>

View file

@ -1,9 +1,11 @@
{% import '@SyliusShop/shared/buttons.html.twig' as buttons %}
{% form_theme form '@SyliusShop/form/theme.html.twig' %}
<div {{ attributes }}>
{{ form_start(form, {'action': path('sylius_shop_account_address_book_set_as_default', {'id': hookable_metadata.context.address.id})}) }}
<input type="hidden" name="_method" value="PATCH" />
<input type="hidden" name={{ form.defaultAddress.vars['full_name'] }} value={{ hookable_metadata.context.address.id }} />
{{ buttons.submit('sylius.ui.set_as_default'|trans, 'set-as-default-button', null, 'btn-sm btn-icon btn-outline-gray w-full') }}
{{ form_row(form._token) }}
{{ form_end(form, {'render_rest': false}) }}
</div>

View file

@ -10,6 +10,5 @@
{% hook 'form' with { form } %}
{{ form_row(form._token) }}
{{ form_end(form, {'render_rest': false}) }}
</div>

View file

@ -5,6 +5,5 @@
<div>
{{ form_start(form, {'action': path('sylius_shop_request_password_reset_token'), 'attr': {'novalidate': 'novalidate'}}) }}
{% hook 'form' %}
{{ form_row(form._token) }}
{{ form_end(form, {'render_rest': false}) }}
</div>

View file

@ -3,7 +3,6 @@
<div {{ attributes }}>
{{ form_start(form, {'attr': {'class': 'ui loadable form', 'novalidate': 'novalidate'}}) }}
{{ form_errors(form) }}
{{ form_row(form._token) }}
<input type="hidden" name="_method" value="PUT" />
{% hook 'form' with { form } %}

View file

@ -2,7 +2,6 @@
<div {{ attributes }}>
{{ form_start(form, {'action': path('sylius_shop_register'), 'attr': {'class': 'ui loadable form', 'novalidate': 'novalidate', 'id': form.vars.id}}) }}
{{ form_row(form._token) }}
{% hook 'form' with { form } %}

View file

@ -7,5 +7,4 @@
{% hook 'form' %}
{{ form_row(form._token) }}
{{ form_end(form, {render_rest: hookable.configuration.render_rest|default(false)}) }}

View file

@ -11,7 +11,6 @@
{{ form_start(form, {'action': path('sylius_shop_cart_checkout'), 'attr': {'novalidate': 'novalidate', 'id': form.vars.id}}) }}
<input type="hidden" name="_method" value="PATCH"/>
{{ form_errors(form) }}
{{ form_widget(form._token) }}
{% hook 'form' with { form } %}

View file

@ -9,6 +9,5 @@
{% hook 'form' with { form, order: resource, email_exists: emailExists } %}
{{ form_row(form._token) }}
{{ form_end(form, {render_rest: hookable.configuration.render_rest|default(false)}) }}
</div>

View file

@ -8,5 +8,4 @@
{% hook 'form' %}
{{ form_row(form._token) }}
{{ form_end(form, {'render_rest': false}) }}

View file

@ -10,6 +10,5 @@
{% hook 'form' with { form, order: resource } %}
{{ form_row(form._token) }}
{{ form_end(form, {'render_rest': false}) }}
</div>

View file

@ -10,6 +10,5 @@
{% hook 'form' %}
{{ form_row(form._token) }}
{{ form_end(form, {'render_rest': false}) }}
</div>

View file

@ -2,5 +2,4 @@
{{ form_start(form, {'action': path('sylius_shop_contact_request'), 'attr': {'novalidate': 'novalidate'}}) }}
{% hook 'form' %}
{{ form_row(form._token) }}
{{ form_end(form, {'render_rest': false}) }}

View file

@ -73,3 +73,12 @@
{% endfor %}
</div>
{% endblock %}
{%- block form_end -%}
{% for child in form %}
{% if 'csrf_token' in child.vars.block_prefixes and child.rendered == false %}
{{ form_row(child) }}
{% endif %}
{% endfor %}
</form>
{%- endblock form_end -%}

View file

@ -12,7 +12,6 @@
{% hook 'form' %}
{{ form_row(form._token) }}
{{ form_end(form, {'render_rest': false}) }}
{% else %}
{{ messages.info('sylius.ui.you_can_no_longer_change_payment_method_of_this_order') }}

View file

@ -15,7 +15,6 @@
{% hook 'add_to_cart' with { product, form } %}
{{ form_row(form._token) }}
{{ form_end(form, {'render_rest': false}) }}
</div>
{% endif %}

View file

@ -11,6 +11,5 @@
{{ form_errors(form) }}
{{ form_row(form._token) }}
{{ form_end(form, {'render_rest': false}) }}
</div>