{CodeRoyale}
All challenges
Multiple ChoiceIntermediate 30s

CSRF tokens

Choose the best answer for: form security
Options
  1. 1Only for GET: tokens are required on reads, not on writes
  2. 2Include unpredictable token in state-changing requests
  3. 3Same as CORS: the CORS headers already provide protection
  4. 4No protection: state-changing requests need no token check
fullstackintermediate

Think you can answer under pressure?

Get matched and answer live questions in 3-minute 1v1 battles. Elo ranking, badge tiers and bragging rights on the line.

Play this in a 3-minute battle