{CodeRoyale}
All challenges
Multiple ChoiceIntermediate 30s

CSRF protection

Choose the best answer for: CSRF in fullstack
Options
  1. 1Same as CORS: CSRF protection equals CORS header checks
  2. 2Include CSRF token in state-changing requests
  3. 3No protection needed: state-changing requests are safe
  4. 4Only for GET: CSRF tokens matter for reads, not writes
fullstackintermediate

Think you can answer under pressure?

Get matched and answer live questions in 3-minute 1v1 battles. Elo ranking, badge tiers and bragging rights on the line.

Play this in a 3-minute battle