From e9948bd10566e0875bc543bcf74ea13735a0b75b Mon Sep 17 00:00:00 2001
From: Guillaume AGNIERAY <dev@agnieray.net>
Date: Thu, 13 Aug 2026 12:15:32 +0200
Subject: [PATCH] Remove CSRF hidden field on forms

CSRF protection in Galette has changed and doesn't rely on tokens anymore
---
 templates/default/helloasso_form.html.twig        | 1 -
 templates/default/helloasso_preferences.html.twig | 1 -
 2 files changed, 2 deletions(-)

diff --git a/templates/default/helloasso_form.html.twig b/templates/default/helloasso_form.html.twig
index 9c2c735..8f5787e 100644
--- a/templates/default/helloasso_form.html.twig
+++ b/templates/default/helloasso_form.html.twig
@@ -61,7 +61,6 @@
                         <img src="{{ url_for("plugin_res", {"plugin": module_id, "path": "images/logo-cb.svg"}) }}" alt="Logo CB" />
                         <img src="{{ url_for("plugin_res", {"plugin": module_id, "path": "images/logo-pci.svg"}) }}" alt="Logo PCI" />
                     </span>
-                    {% include "components/forms/csrf.html.twig" %}
                 </div>
 
                 <div class="ui info visible center aligned message">
diff --git a/templates/default/helloasso_preferences.html.twig b/templates/default/helloasso_preferences.html.twig
index 5414201..e086569 100644
--- a/templates/default/helloasso_preferences.html.twig
+++ b/templates/default/helloasso_preferences.html.twig
@@ -171,7 +171,6 @@
                 </button>
                 <input type="hidden" name="valid" value="1"/>
                 <input type="hidden" name="tab" id="tab" value="{{ tab }}"/>
-                {% include "components/forms/csrf.html.twig" %}
             </div>
         {% endif %}
     </form>