Fix CSRF handling, esp. when errors occur in form

1 files changed, 5 insertions, 0 deletions

diff --git a/form.go b/form.go
index c5dffa0..db0d097 100644
--- a/form.go
+++ b/form.go
@@ -12,6 +12,7 @@ var schemaDecoder *schema.Decoder
 
 func init() {
 	schemaDecoder = schema.NewDecoder()
+	schemaDecoder.IgnoreUnknownKeys(true)
 }
 
 type fieldError struct {
@@ -34,4 +35,8 @@ func parseForm[T any](r *http.Request, data *T) {
 	if err := schemaDecoder.Decode(data, r.PostForm); err != nil {
 		log.Panic("Decoding form: ", err)
 	}
+
+	if withCsrf, ok := any(data).(WithCsrf); ok {
+		withCsrf.SetCsrfField(r)
+	}
 }