What are safe and unsafe requests?

About

In a HTTP security context, requests are:

• safe if they don't have a method that changes the state (ie GET, HEAD)
• unsafe otherwise (ie with the method POST, PATCH, PUT)

When the type of request has been determined, it will have consequences on the security protocol of the Web. For instance, if cookies are sent or not with the samesite property.

Unsafe Request Protection

Unsafe requests are generally protected with a CSRF token.