CSRF token field generated outside of form tag about easyadminbundle HOT 2 OPEN

I can't reproduce this. In my apps, the <input type="hidden"> field with the CSRF token is rendered just before the closing </form>.

Also, if this started failing in 4.8.5 version, we'd receive a ton of feedback about this because we're in 4.8.11 version already.

Can you please investigate a bit more about this? Do you use custom form themes for example? Thanks.

from easyadminbundle.

I just migrated from 4.7.6 to 4.9.1 and this issue also happens

This happens only on one form that has custom widget with {{ form(form) }} - which makes form inside form, and when saving main form, code for some reason validates that inner form

{% block _Object_starttime_widget %}
    {{ form(form) }}
    <input type="button" class="btn datetime-setter" data-target="Object_starttime" value="Now" />
{% endblock %}

On 4.7.6 i can see that code makes form inside form, but when saving main form - CSRF issue doesn't appear.

from easyadminbundle.