de: <a href="https://github.com/zaproxy/zap-extensions/blob/main/addOns/ascanrulesBeta/src/main/java/org/zaproxy/zap/extension/ascanrulesBeta/CrossDomainScanRule.java">CrossDomainScanRule.java</a>
<br>
Alert ID: <a href="https://www.zaproxy.org/docs/alerts/20016/">20016</a>.

<h2 id="id-20012">CSRF Token</h2>
Scans HTML based messages for the existence of Anti-CSRF tokens. <br>
Alerts on requests which do not appear to contain Anti-CSRF tokens.<br>
At HIGH alert threshold only scans messages which are in sc