One doc tagged with "state"

Pass invisible state parameters, CSRF tokens, database IDs, and session keys safely during form submissions using input type='hidden'.