roam/20200723095958-cross_site_r...

586 B

Cross-Site Request Forgery

Using tokens with AJAX

Consider hooking form posts to fetch a CSRF token before submitting the form POST request. This should help to ensure the client has a valid CSRF token for their session.