Global Protection
The engine verifies every unsafe request before it calls the controller action.
Send the token as _token or X-CSRF-Token. Safe methods do not require it.
CSRF Token
Current CSRF Token:
aedae23fd8a6920ca8b74b198ab86ea9fd2400baf54bd2d8c3080eba76848f36
Form with CSRF Protection
Blocked Form
The engine rejects this request before submit() runs.