Is it save to turn off CSRF-torken when using 'sameSite: true'


#1

Is it save to turn off CSRF-torken generation when using ‘sameSite: true’ (strict, lax) ?