I really don't understand the
form_key feature. I have found several sites asking and dealing with issues about the
form_key but none explained the reason for it's existence.
Everyone just worked around this "security feature" e.g. this one
Can anybody explain what the
form_key is used for?
ok, I get the CSRF Vector for changing user data or anything beyond the cart and even the checkout.
But what could the possible attack on the cart be?!