# CSRF Protection / Client Complexity

> "csrf-protection" (security-core layer) is traded against "Client Complexity" (security-core layer) — a principle cannot be scope-separated from a quality, metric, or cost it competes with; resolve by measuring "Client Complexity" and choosing an explicit operating point.

Record: `tension:client-complexity-csrf-protection`
Kind: tension
Canonical: https://banes-lab.com/ontology/schema#tension-client-complexity-csrf-protection

## tensions-with

- [CSRF Protection](https://banes-lab.com/records/arch/csrf-protection.md)
- [Client Complexity](https://banes-lab.com/records/lex/client-complexity.md)