cs

fixed PHPStan errors

- CsrfProtection: removed redundant assert (getSession() already returns Session)
- Form: use foreach instead of array_key_first() on iterable getComponents()
- Form: replaced deprecated isSameSite() with isFrom() (declared on IRequest)
- DefaultFormRenderer: assert Control type after reassignment in render loop

Author: dg

src/Forms/Controls/CsrfProtection.php

@@ -35,9 +35,7 @@ public function __construct(string|Stringable|null $errorMessage = null)
 
 		$this->monitor(Presenter::class, function (Presenter $presenter): void {
 			if (!$this->session) {
-				$session = $presenter->getSession();
-				assert($session instanceof Nette\Http\Session);
-				$this->session = $session;
+				$this->session = $presenter->getSession();
 				$this->session->start();
 			}
 		});

src/Forms/Form.php

@@ -308,8 +308,12 @@ public function allowCrossOrigin(): void
 	public function addProtection(?string $errorMessage = null): Controls\CsrfProtection
 	{
 		$control = new Controls\CsrfProtection($errorMessage);
-		$children = $this->getComponents();
-		$first = $children ? (string) array_key_first($children) : null;
+		$first = null;
+		foreach ($this->getComponents() as $name => $component) {
+			$first = (string) $name;
+			break;
+		}
+
 		$this->addComponent($control, self::ProtectorId, $first);
 		return $control;
 	}

src/Forms/Rendering/DefaultFormRenderer.php

@@ -490,6 +490,7 @@ public function renderControl(Nette\Forms\Control $control): Html
 
 		if ($nextTo = $control->getOption('nextTo')) {
 			$control = $control->getForm()->getComponent($nextTo);
+			assert($control instanceof Nette\Forms\Control);
 			$body->class($this->getValue('control .multi'), true);
 			goto renderControl;
 		}