So currently i am passing some params to a form via the route path as so:
my_module.action:
path: '/status/{action}/{id}'
defaults:
_form: '\Drupal\my_module\Form\MyForm'
requirements:
_permission: 'access content'
And in my form:
public function buildForm(array $form, FormStateInterface $form_state, $action = null, $id = null) {}
And it works as intended, the form receives the two params. But because this way the params are exposed in the url and every user can see them. Is there a way to pass params to the router but not expose them in the url? [passing them in Session is not really best practice, so i'd like to avid it.]