intermediateSpring Security
What is CSRF protection? When should you disable it?
Tests whether you know why CSRF matters for browser sessions but is usually irrelevant for stateless token-based APIs.
This is a Pro question
Sign in, then upgrade to Pro or Power to unlock this question and the full Interview Prep bank.
What is CSRF protection? When should you disable it?