Automatic CSRF protection based on Fetch Metadata headers

13 · · Aug. 4, 2026, 10:37 a.m.
software development ASP.NET Core web-security CSRF-Protection
Summary
This blog post discusses the new Cross-Site Request Forgery (CSRF) protection feature in ASP.NET Core that leverages Fetch Metadata HTTP headers as an alternative to traditional antiforgery tokens, detailing its implementation and benefits.
Read full post on andrewlock.net →
AUTHOR