Implementing CSRF protection

[pdkakoba]

Kindly give us a direction on how CSRF protection could be implemented. Many thanks.

[kraih]

The framework is very low level, so picking the right technique would depend on what your application does exactly. If all state is session based you should be fine with SameSite cookies. You could just set them to strict.