Skip to content

Commit 8a730be

Browse files
Update anti-request-forgery.md (#34449)
* Update anti-request-forgery.md * Update aspnetcore/security/anti-request-forgery.md
1 parent 0fe548c commit 8a730be

File tree

1 file changed

+2
-3
lines changed

1 file changed

+2
-3
lines changed

aspnetcore/security/anti-request-forgery.md

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -159,9 +159,8 @@ Calling <xref:Microsoft.Extensions.DependencyInjection.MvcServiceCollectionExten
159159

160160
## Multiple browser tabs and the Synchronizer Token Pattern
161161

162-
With the Synchronizer Token Pattern, only the most recently loaded page is guaranteed to contain a valid antiforgery token. Apps that wish to support multiple tabs should test supported browsers and log failures. ***Using multiple tabs can be problematic***. For example, if a user opens multiple tabs, requests made from previously loaded tabs might fail with an error: `Antiforgery token validation failed. The antiforgery cookie token and request token do not match`
163-
164-
Consider alternative CSRF protection patterns if this poses an issue.
162+
Multiple tabs logged in as different users, or one logged in as anonymous, are not supported.
163+
165164

166165
## Configure antiforgery with `AntiforgeryOptions`
167166

0 commit comments

Comments
 (0)