Global Protection
The engine verifies every unsafe request before it calls the controller action.
Send the token as _token or X-CSRF-Token. Safe methods do not require it.
CSRF Token
Current CSRF Token:
85be8e0756316eaa10453ab7727b9d6db5ef09ba36ea4339b1f93ff2aba9e1d6
Form with CSRF Protection
Blocked Form
The engine rejects this request before submit() runs.