New Twig function, csrfToken() to auto generate the input field (#4961)

openemr · Feb 25, 2022 · 4c623f5 · 4c623f5
1 parent bda7c76
commit 4c623f5
Showing 1 changed file with 8 additions and 1 deletion.
diff --git a/src/Common/Twig/TwigExtension.php b/src/Common/Twig/TwigExtension.php
@@ -15,6 +15,7 @@
 
 namespace OpenEMR\Common\Twig;
 
+use OpenEMR\Common\Csrf\CsrfUtils;
 use OpenEMR\Core\Header;
 use OpenEMR\Core\Kernel;
 use OpenEMR\Services\Globals\GlobalsService;
@@ -113,7 +114,13 @@ function ($eventName, $eventData = array()) {
                     $this->kernel->getEventDispatcher()->dispatch(new GenericEvent($eventName, $eventData), $eventName);
                     return ob_get_clean();
                 }
-            )
+            ),
+            new TwigFunction(
+                'csrfToken',
+                function ($subject = 'default') {
+                    return sprintf('<input type="hidden" name="_token" value="%s">', CsrfUtils::collectCsrfToken($subject));
+                }
+            ),
         ];
     }