C# 7 and .NET Core 2.0 High Performance

Preventing CSRF (Cross-Site Request Forgery) attacks

CSRF is an attack that executes unsolicited operations on a web application on behalf of the authenticated user. Since the attacker is unable to forge the response of the request, it is implicated mostly on HTTP POST, PUT, and DELETE methods, which are used to modify the insert, update, or delete data on the server.

ASP.NET Core provides a built-in token to prevent CSRF attacks, and you can do this yourself by adding the ValidateAntiForgeryTokenAttribute filter while adding MVC in the ConfigureServices method of the Startup class. Here is the code to add an anti-forgery token globally to your ASP.NET Core application:

public void ConfigureServices(IServiceCollection services){services.AddMvc(options ...