Comment Comment by szmarczak > You have to mitigate CSRF server-side (with a CSRF token> when you're using tokens in JavaScript then you don't have to worry because you already have your CSRF tokenNo reason to have a dedicated CSRF token because your local storage token already works as a CSRF token. parent szmarczak 4 months ago
> when you're using tokens in JavaScript then you don't have to worry because you already have your CSRF token
No reason to have a dedicated CSRF token because your local storage token already works as a CSRF token.