2 ms·
Yes, but that doesn't mean we should build a website that has its CSRF security depend on the Content-Type header. There are other mechanisms to gain this secur
by Thorrez 7y ago
Yes, but that doesn't mean we should build a website that has its CSRF security depend on the Content-Type header. There are other mechanisms to gain this security that are less confusing.
- oefrha 7y agoSure, nothing wrong with an additional (trivial) check, though.