I have the following system in place on my web app and I'd like to know if it's secure.
- Cookie contains CSRF token.
- Application detects CSRF token in cookie.
- Application places token in a header.
- Token in header is verified by the server.
EDIT: More detail - Angular looks for a CSRF token in the cookies, and when it finds one, it adds a header with this value. Then the server determines if the header value is legitimate.