title: Including CSRF token in the layout
body: <p>I want to include the CSRF token in the layout to make it globally accessible for my javascript code:</p>
  
  <pre><code>. . .
  &lt;body data-token="{{ csrf_token() }}"&gt;
  . . .
  </code></pre>
  
  <p>Is this approach a good pratice, or will it introduce any security holes / other problems?</p>