I'm building a simple todo list where the user will login (with csrf-token) and then be able to add items to the todo list. Would I need to add csrf_tokens to submissions using AJAX (todo list items) after the the user has already logged in? I'm using session based authentication.


Question: Ribbon javascript function reference
Answer: All you need to to is to pass some query strings to the aspx page without any JS call. As like in wiki this goes like this.
&lt;a href="/demo/wiki/Seiten/home.aspx?ControlMode=Edit&amp;DisplayMode=Design"&gt;Edit this page&lt;/a&gt;

This works for every page and not only for wiki page. The valid control mode values can be found on the MSDN as the values for the display mode.