Is there a reason to put tokens on a search form?
Let me first tell that I understand the concept of CSRF attacks. Now I wonder, are there benefits to placing tokens on a search form? I ca开发者_如何学编程n't really think of anything myself.
The only benefit I can think of is potentially preventing denial of service attacks if your searches were extremely computationally expensive and required authentication.
精彩评论