Skip to content

Commit 361c2fb

Browse files
authored
fix(http): prevent CSRF token variable name collision (#1413)
1 parent 9db65f0 commit 361c2fb

File tree

1 file changed

+1
-3
lines changed

1 file changed

+1
-3
lines changed

packages/http/src/Session/x-csrf-token.view.php

Lines changed: 1 addition & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -4,8 +4,6 @@
44

55
use function Tempest\get;
66

7-
$name = Session::CSRF_TOKEN_KEY;
8-
$token = get(Session::class)->token;
97
?>
108

11-
<input type="hidden" name="{{ $name }}" value="{{ $token }}" />
9+
<input type="hidden" name="{{ Session::CSRF_TOKEN_KEY }}" value="{{ get(Session::class)->token }}" />

0 commit comments

Comments
 (0)