3 ms·
you might not need more advanced csrf protection than a cookie samesite policy.
by ptman 7y ago
you might not need more advanced csrf protection than a cookie samesite policy.
- zadokshi 7y agoThen throw a hidden input field with a CSRF token in your form and your done. Not sure what the big deal is here.