Form::disableSameSiteProtection() replaced with allowCrossOrigin()

Author: dg

src/Application/UI/Form.php

@@ -21,7 +21,7 @@ class Form extends Nette\Forms\Form implements SignalReceiver
 	public $onAnchor = [];
 
 	/** @var bool */
-	private $sameSiteProtection = true;
+	protected $crossOrigin = false;
 
 
 	/**
@@ -103,9 +103,16 @@ public function isAnchored(): bool
 	/**
 	 * Disables CSRF protection using a SameSite cookie.
 	 */
+	public function allowCrossOrigin(): void
+	{
+		$this->crossOrigin = true;
+	}
+
+
+	/** @deprecated  use allowCrossOrigin() */
 	public function disableSameSiteProtection(): void
 	{
-		$this->sameSiteProtection = false;
+		$this->crossOrigin = true;
 	}
 
 
@@ -153,7 +160,7 @@ public function signalReceived(string $signal): void
 			$class = static::class;
 			throw new BadSignalException("Missing handler for signal '$signal' in $class.");
 
-		} elseif ($this->sameSiteProtection && !$this->getPresenter()->getHttpRequest()->isSameSite()) {
+		} elseif (!$this->crossOrigin && !$this->getPresenter()->getHttpRequest()->isSameSite()) {
 			$this->getPresenter()->detectedCsrf();
 
 		} elseif (!$this->getPresenter()->getRequest()->hasFlag(Nette\Application\Request::RESTORED)) {