I read lots of posts but I haven't found an answer about this topic. It seems to me that csrf protection is disabled by default. How can I add csrf token meta tag? the syntax <meta name="csrf-token" content="{{ csrf_token() }}"> returns an error. What is the best practise to add csrf token protection with October?

Hey Bob,

Take a look at the CSRF plugin by VDLP, it is a great plugin and should solve it for you.

I hope this helps!