|
25 | 25 | use Symfony\Component\Routing\Attribute\Route; |
26 | 26 | use Symfony\Component\Routing\Requirement\Requirement; |
27 | 27 | use Symfony\Component\Security\Http\Attribute\CurrentUser; |
| 28 | +use Symfony\Component\Security\Http\Attribute\IsCsrfTokenValid; |
28 | 29 | use Symfony\Component\Security\Http\Attribute\IsGranted; |
29 | 30 |
|
30 | 31 | /** |
@@ -159,15 +160,9 @@ public function edit(Request $request, Post $post, EntityManagerInterface $entit |
159 | 160 | */ |
160 | 161 | #[Route('/{id:post}/delete', name: 'admin_post_delete', requirements: ['id' => Requirement::POSITIVE_INT], methods: ['POST'])] |
161 | 162 | #[IsGranted('delete', subject: 'post')] |
162 | | - public function delete(Request $request, Post $post, EntityManagerInterface $entityManager): Response |
| 163 | + #[IsCsrfTokenValid('delete', tokenKey: 'token')] |
| 164 | + public function delete(Post $post, EntityManagerInterface $entityManager): Response |
163 | 165 | { |
164 | | - /** @var string|null $token */ |
165 | | - $token = $request->getPayload()->get('token'); |
166 | | - |
167 | | - if (!$this->isCsrfTokenValid('delete', $token)) { |
168 | | - return $this->redirectToRoute('admin_post_index', [], Response::HTTP_SEE_OTHER); |
169 | | - } |
170 | | - |
171 | 166 | // Delete the tags associated with this blog post. This is done automatically |
172 | 167 | // by Doctrine, except for SQLite (the database used in this application) |
173 | 168 | // because foreign key support is not enabled by default in SQLite |
|
0 commit comments