security - Is the anti-forgery token for logout necessary? -


for site pages, after being logged in few minutes, following error when attempt log out:

the anti-forgery cookie token , form field token not match.

i read in this link ways track exception down, since exception appears on logout, wonder if might easier exclude anti-forgery-token logout form altogether. idea?

i using template login page auto-generated new mvc projects.

thanks!

it advisable add token logout form, otherwise can create page posts logout page, logging out users, annoying.


Comments

Popular posts from this blog

basic authentication with http post params android -

vb.net - Virtual Keyboard commands -

css - Firefox for ubuntu renders wrong colors -