protect_from_forgery in Rails 6? : <p>The <code>protect_from_forgery</code> method isn't included in my application controller with a default Rails 6 app, but there's the embedded ruby <code>&lt;%= csrf_meta_tags %&gt;</code> in the main application layout. Does this mean that the <code>protect_from_forgery</code> method has been abstracted and is no longer explicitly needed in the application controller? </p>

<p>I've bought the Pragmatic Programmer's Rails 6 book and the only thing I could find was "the csrf_meta_tags() method sets up all the behind-the-scenes data needed to prevent cross-site request forgery attacks".</p>
