CSRF Protection / Client Complexity
Kind: tension
Record: tension:client-complexity-csrf-protection
Canonical: Schema
"csrf-protection" (security-core layer) is traded against "Client Complexity" (security-core layer) — a principle cannot be scope-separated from a quality, metric, or cost it competes with; resolve by measuring "Client Complexity" and choosing an explicit operating point.
Listed in Tensions, after Continuous Compliance / Pipeline Complexity and before Parameterized Queries / Dynamic Query Flexibility.