symfony
diff --git a/‎book/forms.rst
Copy file name to clipboardExpand all lines: book/forms.rst
+2Lines changed: 2 additions & 0 deletions b/‎book/forms.rst
Copy file name to clipboardExpand all lines: book/forms.rst
+2Lines changed: 2 additions & 0 deletions
diff --git a/‎reference/configuration/framework.rst
Copy file name to clipboardExpand all lines: reference/configuration/framework.rst
+11-5Lines changed: 11 additions & 5 deletions b/‎reference/configuration/framework.rst
Copy file name to clipboardExpand all lines: reference/configuration/framework.rst
+11-5Lines changed: 11 additions & 5 deletions
@@ -1776,6 +1776,8 @@ The CSRF token can be customized on a form-by-form basis. For example::
         // ...
     }
 
+.. _form-disable-csrf:
+
 To disable CSRF protection, set the ``csrf_protection`` option to false.
 Customizations can also be made globally in your project. For more information,
 see the :ref:`form configuration reference <reference-framework-form>`
 
@@ -227,8 +227,11 @@ enabled
 
 Whether or not to enable support for the Form component.
 
-You will also have to disable form support if you want to
-:ref:`disable the validation support <validation-enabled>`.
+If you don't use forms, setting this to ``false`` may increase your application's
+performance because less services will be loaded into the container.
+
+If this is activated, the :ref:`validation system <validation-enabled>`
+is also enabled automatically.
 
 csrf_protection
 ~~~~~~~~~~~~~~~
@@ -241,9 +244,12 @@ enabled
 **type**: ``boolean`` **default**: ``true`` if form support is enabled, ``false``
 otherwise
 
-This option can be used to disable CSRF protection of forms. You need to
-disable CSRF protection to be able to disable session. For example, this
-is useful when you only use forms in an API-only website.
+This option can be used to disable CSRF protection on *all* forms. But you
+can also :ref:`disable CSRF protection on individual forms <form-disable-csrf>`.
+
+If you're using forms, but want to avoid starting your session (e.g. using
+forms in an API-only website), ``csrf_protection`` will need to be set to
+``false``.
 
 field_name
 ..........
Original file line number	Diff line number	Diff line change
`@@ -1776,6 +1776,8 @@ The CSRF token can be customized on a form-by-form basis. For example::`
`1776`	`1776`	`// ...`
`1777`	`1777`	`}`
`1778`	`1778`
	`1779`	`+.. _form-disable-csrf:`
	`1780`	`+`
`1779`	`1781`	To disable CSRF protection, set the ``csrf_protection`` option to false.
`1780`	`1782`	`Customizations can also be made globally in your project. For more information,`
`1781`	`1783`	see the :ref:`form configuration reference <reference-framework-form>`