> Does anyone know of ANY web server that > provides > > CSRF protection at the web server level? I'm curious. > >
Take a look at mod_security that provides CSRF prevention mechanism by means of JS injection.
smime.p7s
Description: S/MIME cryptographic signature