Angular · Security · Tech Lead · Concept
What is CSRF and how do Angular apps mitigate it?
Short Interview Answer
Cross-site request forgery tricks the browser into sending auth cookies; use tokens/SameSite and careful cookie design.
Detailed Explanation
HttpClientXsrfModule reads cookie tokens for mutating requests. Prefer token auth in headers for SPAs when appropriate.