this value as a form value and also as a cookie value. When a POST request is sent to the
site, the request should only be considered valid if the form value and the cookie value
are the same.
CWE-352 : Cross-Site Request