2 result(s) for "ForbiddenError: invalid csrf token"
After Cursor refactored your security middleware, CSRF tokens are no longer being validated. Form submissions succeed even with invalid tokens, creating a se...
Your Cursor-generated application has forms and state-changing API endpoints (POST, PUT, DELETE) that lack CSRF (Cross-Site Request Forgery) protection. An a...