diff options
Diffstat (limited to 'Csrf')
-rw-r--r-- | Csrf/TokenGenerator/TokenGeneratorInterface.php | 14 |
1 files changed, 1 insertions, 13 deletions
diff --git a/Csrf/TokenGenerator/TokenGeneratorInterface.php b/Csrf/TokenGenerator/TokenGeneratorInterface.php index 4d81da9..e02ac66 100644 --- a/Csrf/TokenGenerator/TokenGeneratorInterface.php +++ b/Csrf/TokenGenerator/TokenGeneratorInterface.php @@ -12,19 +12,7 @@ namespace Symfony\Component\Security\Csrf\TokenGenerator; /** - * Generates and validates CSRF tokens. - * - * You can generate a CSRF token by using the method {@link generateCsrfToken()}. - * This method expects a unique token ID as argument. The token ID can later be - * used to validate a token provided by the user. - * - * Token IDs do not necessarily have to be secret, but they should NEVER be - * created from data provided by the client. A good practice is to hard-code the - * token IDs for the various CSRF tokens used by your application. - * - * You should use the method {@link isCsrfTokenValid()} to check a CSRF token - * submitted by the client. This method will return true if the CSRF token is - * valid. + * Generates CSRF tokens. * * @since 2.4 * @author Bernhard Schussek <bschussek@gmail.com> |