CSRF protection without cookie (DSGVO/GDPR)

Hi jreklund,

thank you very much for your response. This sounds good. However I prefer to set any cookie only after the user confirmed the cookie hint. Unfortunately, there are lawyers in Germany who earn their money only by issuing warnings. You then have to pay large sums for a warning only. So I don't want to take any chances. I will write my new idea in a new post.

Many greetings
Kel