Update readme.md

leastprivilege · Jan 21, 2019 · 610722c · 610722c
1 parent 8a4e80e
commit 610722c
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/BFF/readme.md b/BFF/readme.md
@@ -5,4 +5,6 @@ This sample shows a possible approach for securing a SPA using
 * automatic token management
 * proxying calls to back-end services
 
-No explicit anti-forgery protection has been implemented, because we rely on SameSite cookies.
+No explicit anti-forgery protection has been implemented, because we assume SameSite cookies work for you.
+
+See [this](https://leastprivilege.com/2019/01/18/an-alternative-way-to-secure-spas-with-asp-net-core-openid-connect-oauth-2-0-and-proxykit/) blog post for more details.