Hey Team,
My client was wondering if we can take any Anti-CSRF measures using nonce OR if there is any security concern from you. We keep getting tripped up in our site scan about anti-CRSF.
We are not aware of any CSRF issues at the moment. Nonces are used wherever they are needed.
Are there any specific details in the scan about the issue, like:
– Which file is affected?
– What is the query to execute the CS?