Authorization on the site: how does the browser know which csrf_token to use?

Question

PHP

There is a site (iRedMail admin panel) on which you need to log in and then make a POST request to create a user.
Parsed responses from the server via HttpFox. When creating a user, the browser does this Post Data

csrf_token=M7EwC2873KgEDVT67L36k36UJEeGcm5F&username=test&domainName=domain.com&newpw=test&confirmpw=test&cn=&mailQuota=&oldMailQuota=

How does the browser know which csrf_token to use?
Do I understand correctly that in addition to cookies, the site also has token protection?

Answer 1

Read about CSRF . csrf_token is given by the server and you must return it

Answer 2

the browser does not know. knows the server.