From 74bf1b4717a75f5dffa0cfd534dd6f1270358664 Mon Sep 17 00:00:00 2001
From: Rick Anderson <3605364+Rick-Anderson@users.noreply.github.com>
Date: Fri, 6 Dec 2024 10:25:14 -1000
Subject: [PATCH 1/2] Update anti-request-forgery for multiple tabs

Fixes #25564
---
 aspnetcore/security/anti-request-forgery.md | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/aspnetcore/security/anti-request-forgery.md b/aspnetcore/security/anti-request-forgery.md
index 4e1a3481d0db..ff02557890dd 100644
--- a/aspnetcore/security/anti-request-forgery.md
+++ b/aspnetcore/security/anti-request-forgery.md
@@ -159,9 +159,7 @@ Calling <xref:Microsoft.Extensions.DependencyInjection.MvcServiceCollectionExten
 
 ## Multiple browser tabs and the Synchronizer Token Pattern
 
-With the Synchronizer Token Pattern, only the most recently loaded page is guaranteed to contain a valid antiforgery token. Apps that wish to support multiple tabs should test supported browsers and log failures. ***Using multiple tabs can be problematic***. For example, if a user opens multiple tabs, requests made from previously loaded tabs might fail with an error: `Antiforgery token validation failed. The antiforgery cookie token and request token do not match`
- 
- Consider alternative CSRF protection patterns if this poses an issue.
+Multiple tabs with different uses is not supported, including a user and anonymous.
 
 ## Configure antiforgery with `AntiforgeryOptions`
 

From 0013177123f3b21627f5c7c0044acf3a7ca2bdeb Mon Sep 17 00:00:00 2001
From: Rick Anderson <3605364+Rick-Anderson@users.noreply.github.com>
Date: Fri, 6 Dec 2024 10:26:39 -1000
Subject: [PATCH 2/2] Update aspnetcore/security/anti-request-forgery.md

---
 aspnetcore/security/anti-request-forgery.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/aspnetcore/security/anti-request-forgery.md b/aspnetcore/security/anti-request-forgery.md
index ff02557890dd..343c6d980b34 100644
--- a/aspnetcore/security/anti-request-forgery.md
+++ b/aspnetcore/security/anti-request-forgery.md
@@ -159,7 +159,7 @@ Calling <xref:Microsoft.Extensions.DependencyInjection.MvcServiceCollectionExten
 
 ## Multiple browser tabs and the Synchronizer Token Pattern
 
-Multiple tabs with different uses is not supported, including a user and anonymous.
+Multiple tabs with different users is not supported, including a user and anonymous.
 
 ## Configure antiforgery with `AntiforgeryOptions`