Home/ Questions/Q 3802046
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-19T14:08:46+00:00

I’m in trying to protect from CSRF and have two scenarious: Doing POST from

  • 0

I’m in trying to protect from CSRF and have two scenarious:

  1. Doing POST from within another site and it fails when I enable AntiForgeryToken
  2. I have tried from my “malicious” Javascript (running on another site) to first do GET of the page, parse it and extract RequestVerificationToken and then do a POST. This also fails but it is unclear to me why?

Can anyone please explain why?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    For security reasons, you cannot retrieve content from another domain using AJAX.

    Therefore, other sites cannot get your token.

    • 0