Advanced CSRF and Stateless Anti-CSRF - owasp

RIA & client-side
state
{
”purchase”: {
”items”: [{},{}],
”shipment”: {}
}
}