Use a CSRF token in each session. This token has to be send inside the request to confirm the action. This token could be protected with CORS.
確定! 回上一頁