New answers tagged


Yes, you still need it. Yes, I can’t think of a way to break your site today, but that isn’t the security question, and this is a security site. No, there are no other security benefits to using a csrf token. You could look at crypto systems that use nonces, or anti-replay stuff but that’s not what the csrf is doing. The security question is should I use ...

Top 50 recent answers are included