Remove CSRF properties

[kenjis]

Description

• make IncomingRequest::$enableCSRF deprecated
• remove $CSRFProtection properties in Mock*Config.php

Checklist:

• Securely signed commits
• [] Component(s) with PHPDoc blocks, only if necessary or adds value
• [] Unit testing, with >80% coverage
• User guide updated
• [] Conforms to style guide

[MGatner]

Good catch!

@samsonasik is there any way for Rector to detect "unused properties"?

[samsonasik]

@MGatner there is, only for private property to avoid bc break, and already included in dead code set list

https://github.com/rectorphp/rector-src/blob/9eac8d451ae449fa96fe811ea6d2eeffee3f182e/rules/DeadCode/Rector/Property/RemoveUnusedPrivatePropertyRector.php#L22

CodeIgniter4/rector.php

Line 53 in f43f46b

$containerConfigurator->import(SetList::DEAD_CODE);