Miguel Grinberg • 12/21/2025

CSRF Protection without Tokens or Hidden Form Fields

The article details the author's journey implementing CSRF protection for the Microdot web framework. It moves beyond traditional token-based methods to describe a 'modern' technique leveraging the browser's Sec-Fetch-Site header, which simplifies defense against cross-site request forgery attacks.

0 comments

#web framework #web security #Csrf