samshers
samshers

Reputation: 3670

CSRF token on a web page with multiple forms?

When CSRF is enabled and a web page has multiple forms, will all the forms have the same csrf token or each form has a unique csrf token?

If this is framework dependent, then how does it work in the context of spring security?

Upvotes: 1

Views: 328

Answers (1)

Atul
Atul

Reputation: 3357

CSRF is not associated with form or something but to associated with each request.

Each individual request contains new csrf token.

Upvotes: 1

Related Questions