javascript - How does axios resist XSRF (cross-site request forgery) and what is the principle?

Question

The original article also mentioned how to resist cross-site request forgery

Answer 1

http://www.cnblogs.com/libin-...
You can refer to this article. The most effective way to prevent xsrf is to add custom attributes in the request header. The attribute value is the token returned by the background (generally stored in the cookie), when the backend server accepts the request from the browser, it will get the token in the request header for comparison.