title: Fix "Cross-Site Request Forgery" vulnerability in AngularJS
body: <p>I working on resolving vulnerabilities on an AngularJS application.
  The Cross-Site Request Forgery vulnerability is there in my app.</p>
  
  <p>I have put the XSRF-TOKEN in cookies </p>
  
  <p>Inside <strong>app.js</strong> module:</p>
  
  <pre><code>$http(req).then(function(result) {
      $cookieStore.put('XSRF-TOKEN', result.data.session);
  }, function(error) {
         console.log(error);
     }
  );
  
  ...
  ...
  
  if ($cookieStore.get('XSRF-TOKEN') == null || $cookieStore.get('XSRF-TOKEN') == "") {
      rejection.status = 403;
  }
  </code></pre>
  
  <p>The vulnerability is not going. I have followed this post: <a href="https://stackoverflow.com/a/22498311/8337391">https://stackoverflow.com/a/22498311/8337391</a> . But the issue is still persisting.
  It will be helpful if anybody can give some useful tips please.</p>