4 ms·Wouldn't you need client code to cover csrf cases?by awinder 9y agoWouldn't you need client code to cover csrf cases?throwasehasdwi 9y agoyou just cover them with a CSRF token embedded in page like ye olde days :)