Securing your API: a modern alternative to CSRF tokens 9 years ago
In addition to everything you've mentioned, the double submit cookie approach for csrf defense saves you from storing any state if you don't want to use a backend session.
jadacyrus
Posts0
Comments1
No posts found.