How to protect against CSRF attacks?

Answer 1

" Preventing Cross-Site Request Forgery (CSRF) Attacks in ASP.NET Web API"

https://docs.microsoft.com/en-us/aspnet/web-api/overview/security/preventing-cross-site-request-forgery-csrf-attacks

Answer 2

Use RESTful design, implement anti-forgery tokens, ensure cookies use samesite attribute, use additional authentication for sensitive user actions.