Bug 36598: Add comments asking to keep both CSRF checks in sync

Signed-off-by: Victor Grousset/tuxayo <victor@tuxayo.net>

Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>
Signed-off-by: Lucas Gass <lucas@bywatersolutions.com>

Koha/App/Plugin/CSRF.pm

@@ -62,6 +62,8 @@ this case, no verification is done.
 
 =cut
 
+# If you need to update the logic here, please also update Koha::Middleware::CSRF
+
 sub register {
     my ( $self, $app, $conf ) = @_;
 

Koha/Middleware/CSRF.pm

@@ -20,6 +20,8 @@ use Modern::Perl;
 use parent qw(Plack::Middleware);
 use Plack::Response;
 
+# If you need to update the logic here, please also update Koha::App::Plugin::CSRF
+
 sub call {
     my ( $self, $env ) = @_;
     my $req = Plack::Request->new($env);