Update anti-request-forgery.md (#25152)
parent
d6c3c33474
commit
9a1abea9d4
|
@ -85,7 +85,7 @@ Attacks that exploit trusted cookies between apps hosted on the same domain can
|
|||
> [!WARNING]
|
||||
> ASP.NET Core implements antiforgery using [ASP.NET Core Data Protection](xref:security/data-protection/introduction). The data protection stack must be configured to work in a server farm. For more information, see [Configuring data protection](xref:security/data-protection/configuration/overview).
|
||||
|
||||
Antiforgery middleware is added to the [Dependency injection](xref:fundamentals/dependency-injection) container when one of the following APIs is called in `Startup.ConfigureServices`:
|
||||
Antiforgery middleware is added to the [Dependency injection](xref:fundamentals/dependency-injection) container when one of the following APIs is called in `Startup.ConfigureServices` or `Startup.Configure`:
|
||||
|
||||
* <xref:Microsoft.Extensions.DependencyInjection.MvcServiceCollectionExtensions.AddMvc%2A>
|
||||
* <xref:Microsoft.AspNetCore.Builder.RazorPagesEndpointRouteBuilderExtensions.MapRazorPages%2A>
|
||||
|
|
Loading…
Reference in New Issue