Not this one ;) This is the default header value used on most framework (spring, resteasy, ...). We use the XSRF abbreviation in our variable naming and javadoc, but in fact X-CSRF is more commonly seen.