CSRF tokens have overhead and they have to be implemented for all inputs which i...

		aj3 on July 12, 2021 \| parent \| context \| favorite \| on: Firefox 90 supports Fetch Metadata Request Headers CSRF tokens have overhead and they have to be implemented for all inputs which isn't trivial (judging by amount of CSRF related vulnerabilities disclosed in hacker one reports). I think the intention here is to make cross site requests stand out so that they can be dealt with in a more streamlined/uniform fashion.

Perhaps as a fallback for when somebody forgets to use a token for an input. Thanks!