I've been asked about CSRF protection, does Grails take care of it automagically? This is what ChatGPT is telling me, but I havent found anything on Spring Security Core docs, any word of wisdom? ChatGPT says I can use this, is she (don't ask LOL) allucinating?

grails:
    plugin:
        springsecurity:
            csrf:
                enabled: true
                tokenName: _csrf
                headerName: X-CSRF-TOKEN

@giangio if you use the <g:form tag library and use normal Spring Security (not the plugin), it is handled automatically. I don't believe the plugin supports it. I just use Spring Security with java config.