Using ASP.Net MVC v2.0, I am starting to research the use of the Html.AntiForgeryToken()
method when submitting forms that process data. I can see it sets a hid
If all machines across the farm share the same
, everything will work. There are lots of resources on how to set this. There's also a tutorial on MSDN.
Note that the name
is a bit misleading, since this is actually set per-application in ~/Web.config
. So set the
explicitly in your app's Web.config, then deploy across your farm.