If my site only responds to requests from it's own domain, does it make sense to implement CSRF tokens on my requests?
I believe it is the Cross-Site in CSRF that's leading me to ask this question.
If cross-site requests are just ignored, does the CSRF Anti-Frogery token add any value?