Glossary term
What is CSRF token? Meaning for developers
A random, session-bound secret put in each form and checked by the server. A different site cannot read it, so it cannot forge the request.
Learn it properly · Security for DevelopersLesson 2: XSS, CSRF, Clickjacking and Security HeadersHow a script gets into your page and how to stop it with output encoding and CSP, how CSRF uses your cookies, SameSite and CSRF tokens, frame-ancestors, and the headers worth setting.