Back

csrfMetaTags()

Include this in your layouts' head sections to include meta tags containing the authenticity token for use by JavaScript AJAX requests needing to POST data to your application.

Name	Type	Required	Default	Description
encode	boolean	No	true	When set to `true`, encodes tag content, attribute values, and URLs so that Cross Site Scripting (XSS) attacks can be prevented. Set to `attributes` to only encode attribute values and not tag content.

<head>
  #csrfMetaTags()#
</head>