<p>Take a look at the craft documentation for this: <a href="https://craftcms.com/guides/enabling-csrf-protection#updating-your-javascript" rel="nofollow noreferrer">https://craftcms.com/guides/enabling-csrf-protection#updating-your-javascript</a> it should point you in the right direction.</p>

CC BY-SA 4.0
2019-08-30T16:08:54.873Z
2019-08-30T16:08:54.873Z
dmatthams
<p>I have a site that is using Craft CMS headless and React. There are a few forms that need to post to controllers but I'm not sure how to set up the CSRF tokens and keep it secure.</p>

<p>Can anyone advise me on how to manage this?</p>

<plugin-development><craft3><headless>
Headless Craft CSRF
# Headless Craft CSRF

(Asked by: username_0 on 2019-08-30)

I have a site that is using Craft CMS headless and React. There are a few forms that need to post to controllers but I'm not sure how to set up the CSRF tokens and keep it secure.

Can anyone advise me on how to manage this?

**Tags:** plugin-development, craft3, headless

---

## 1 answers

### Answer by username_1 on 2019-08-30. Score: 0

Take a look at the craft documentation for this: <https://craftcms.com/guides/enabling-csrf-protection#updating-your-javascript> it should point you in the right direction.


---

