csrf
csrf copied to clipboard
XMLHttpRequest regen token problem
When a request is send in ajax, the token are regenerate.
The token in form are invalid because the page are not reload.
oO I remember ajax request are protected by same origin policy.
There is no need csrf protection csrf in ajax ?