what is implementation measures in CSRF Protection ?

Question Posted / raghavendra

1 Answers
1331 Views
I also Faced
E-Mail Answers

what is implementation measures in CSRF Protection ?..

Answer / suresh kumar

The implementation of CSRF protection in Laravel is discussed in detail in this section. The following points are notable before proceeding further on CSRF protection -

CSRF is implemented within HTML forms declared inside the web applications.
You have to include a hidden validated CSRF token in the form, so that the CSRF protection middleware of Laravel can validate the request.

The syntax is shown below -

<form method = "POST" action="/profile">
{{ csrf_field() }}
...
</form>
You can conveniently build JavaScript driven applications using JavaScript HTTP library, as this includes CSRF token to every outgoing request.

The file namely resources/assets/js/bootstrap.js registers all the tokens for Laravel applications and includes meta tag which stores csrf-token with Axios HTTP library.

Form without CSRF token :

Consider the following lines of code. They show a form which takes two parameters as input: email and message.

<form>
<label> Email </label>
<input type = "text" name = "email"/>
<br/>
<label> Message </label> <input type="text" name = "message"/>
<input type = ”submit” name = ”submitButton” value = ”submit”>
</form>