csrf-protection

Prevents Cross-Site Request Forgery (CSRF) attacks in which malicious sites trick authenticated users into making unwanted requests. Use when handling state-changing operations via forms, POST/PUT/DELETE endpoints, or any request that modifies data on behalf of a logged-in user. Typical triggers: form submission, state change, cookie-based authentication, POST endpoints, delete actions, user actions, web forms, authenticated requests.