S
S
Stepgor2020-08-13 20:58:48
CSRF
Stepgor, 2020-08-13 20:58:48

CSRF token for chrome extension?

I'm making a browser extension. I share the purchase and setup on the site, and the functionality in the extension itself. User login takes place on the site. And then check for login and already work with the extension.
The bottom line is that in the extension I want to make protection from csrf.
Is it safe to just make a request like getcsrftoken that will return a csrf token?
I am also thinking about implementation through cookie permission.
But I don’t know which way will be the most correct and safe?

Answer the question

In order to leave comments, you need to log in

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question