Custom CSRF Token Name Validation for AJAX and Form Requests in CodeIgniter 4
Custom CSRF Token Name Validation for AJAX and Form Requests in CodeIgniter 4 Goal: Configure a custom csrfTokenName in app/Config/Security.php so CodeIgniter 4 validates POST, PUT, PATCH, and DELETE requests consistently whether the token arrives in a hidden form field or an X-CSRF-TOKEN header. Constraint: The Security middleware appears to prioritize the