request->getHeader('X-Csrf-Token-Key'); $tokenValue = $this->request->getHeader('X-Csrf-Token-Value'); $checkToken = $this->security->checkToken($tokenKey, $tokenValue); return $checkToken; } public function checkHttpReferer() { $httpHost = parse_url($this->request->getHttpReferer(), PHP_URL_HOST); $checkHost = $httpHost == $this->request->getHttpHost(); return $checkHost; } public function isNotSafeRequest() { $method = $this->request->getMethod(); $list = ['post', 'put', 'patch', 'delete']; $result = in_array(strtolower($method), $list); return $result; } }