CSRF Protection

The Scenario

A sensitive action relies solely on session cookies, making it vulnerable to Cross-Site Request Forgery.