Which two techniques can be used to protect a storefront POST action against Cross Site Request Forgery (CSRF) attacks? (Choose two.)
Select all that apply, then click Submit answer.
-
○
The form sending data to that action needs to include a fornjtey parameter with a valid form key and the action must instantiate \Manento\Framwork\Data\ForumKey\Formkey\Validator validate it.
-
○
The action needs to implement \Mgento\Framework\App\CSrfAwareActioninterface and include the validateForCsrf method implementing the actual protection logic.
-
○
The form sending data to that action needs to include a form_key parameter with a valid form key which will automatically be used in a built-in CSRF validation.
-
○
The action needs to implement \Magento\Framework\App\ActionvHttpPosTActioninterface to trigger built-in CSRF validation.