Q010

A mutation request without the CSRF proof (POST, JSON, x-weft: 1, same origin): 403.

Fix: Call mutations through their stub, not a hand-made fetch or form.

Status in weft@0.1.0: reported by @weft-js/start when it serves or renders the route, and by weft check and weft routes --meta.