Mastodawn

Protection anti CSRF à l'aide du header `Sec-Fetch-Site`.

🔗 https://blog.miguelgrinberg.com/post/csrf-protection-without-tokens-or-hidden-form-fields

CSRF Protection without Tokens or Hidden Form Fields

A couple of months ago, I received a request from a random Internet user to add CSRF protection to my little web framework Microdot, and I thought it was a fantastic idea.When I set off to do this…