4 ms·
In addition to everything you've mentioned, the double submit cookie approach for csrf defense saves you from storing any state if you don't want to use a backe
by jadacyrus 9y ago
In addition to everything you've mentioned, the double submit cookie approach for csrf defense saves you from storing any state if you don't want to use a backend session.
- zackbloom 9y agoSo does using the client to hold information.