Mohamed AnaniFollowNov 19, 2022·1 min readIn your second scenario: That is a state changing req right.1KarannatarajIts not about the csrf its a idor bug