Start Debugging

Tag: csrf

2 posts

2026-09-22 aspnetcore dotnet-11 minimal-apis

How to disable antiforgery validation for a single minimal API form endpoint in ASP.NET Core 11

Call .DisableAntiforgery() on the one endpoint, or on a MapGroup. In ASP.NET Core 11 that opts out of both the token middleware and the new automatic CSRF check. Measured matrix, precedence traps, and narrower alternatives.

2026-07-17 aspnetcore dotnet-11 security

ASP.NET Core 11 Preview 6 turns on automatic CSRF protection

Preview 6 rejects unsafe cross-origin browser requests by default, reading the Sec-Fetch-Site header instead of an antiforgery token. Here is what it blocks and how to opt out.