All Security Checks
ContentHigh PriorityPro
Anti-CSRF Tokens
CSRF tokens prevent attackers from tricking users into performing unwanted actions.
Why It Matters
Without CSRF protection, attackers can craft malicious pages that submit forms to your site using the victim's authenticated session.
How We Check
We analyze forms for CSRF token presence and check for proper SameSite cookie attributes as an additional defense.
How to Fix
Implement CSRF tokens in all state-changing forms. Use SameSite=Lax or Strict cookies. Verify token on the server for each request.
Related Security Checks
Check Your Website Now
Run a free security scan to check for Anti-CSRF Tokens issues and 58+ other security vulnerabilities.
Scan Your Website Free