Hi, the anti forgery token is correctly used in login.cshtml but this is missing in the partial login form.
It is incorrectly used during the log off.
Obviously this is a very serious issue as most end users hit the partial login form.
Hope this may help others.
Comments: Resolved.
It is incorrectly used during the log off.
Obviously this is a very serious issue as most end users hit the partial login form.
Hope this may help others.
Comments: Resolved.