CSRF stands for Cross Site Request Forgery. CSRF is created to prevent the form values from being sent outside our application. It generates a random nonce (token) in each form.