Full-Stack Vue.js 2 and Laravel 5

CSRF protection
CSRF (cross-site request forgery) is a type of malicious exploit where an
attacker gets a user to unknowingly perform an action on a server that they're
currently logged in to. This action will change something on the server that is
advantageous to the attacker, for example, transfer money, change the password
to one the attacker knows, and so on.
For example, an attacker might hide a script in a web page or email and direct
the user to it somehow. When it executes, this script could make a POST request
to importantwebsite.com/updateEmailAndPassword. If the user is logged in to this site, the
request may be successful.
One way to prevent this kind of attack is to embed a special token, essentially a
random string, in any form that a user might submit. When the form is
submitted, the token is checked against the user's session to make sure it
matches. An attacker won't be able to forge this token in their script and should,
therefore, be thwarted by this feature.
In Laravel, CSRF token creation and verification is managed by the
VerifyCsrfToken middleware that is added to the web routes by default:
Figure 9.4. CSRF prevention process To include the CSRF token in a form you can simply add {{
csrf_field() }} within the form tag. This will generate a hidden input field containing a valid CSRF
token, for example:
This won't work in our scenario, though, as our form is not inside a Blade view