Is it possible to secure a Single Page Application (SPA) served from a CDN that communicates with a REST API, assuming the following:
- The front end communicates with a backend REST API using a token once the user has been authenticated
- The front end is only served via CDN with a wildcard HTTPS cert
How do you avoid CSRF?