$enableCsrfCookie public property Whether to use cookie to persist CSRF token. If false, CSRF token will be stored in session under the name of $csrfParam. Note that while storing CSRF tokens in session increases security, it requires starting a session for every page, which will degrade your site performance. public boolean $enableCsrfCookie = true

$enableCookieValidation public property Whether cookies should be validated to ensure they are not tampered. Defaults to true. public boolean $enableCookieValidation = true

$csrfTokenFromHeader public read-only property The CSRF token sent via CSRF_HEADER by browser. Null is returned if no such header is sent. public string getCsrfTokenFromHeader ( )

$csrfToken public read-only property The token used to perform CSRF validation. public string getCsrfToken ( $regenerate = false )

$csrfParam public property The name of the token used to prevent CSRF. Defaults to '_csrf'. This property is used only when $enableCsrfValidation is true. public string $csrfParam = '_csrf'

$csrfCookie public property The configuration for creating the CSRF cookie. This property is used only when both $enableCsrfValidation and $enableCsrfCookie are true. public array $csrfCookie = ['httpOnly' => true]

$cookieValidationKey public property A secret key used for cookie validation. This property must be set if $enableCookieValidation is true. public string $cookieValidationKey = null

$cookies public read-only property The cookie collection. public yii\web\CookieCollection getCookies ( )

$contentType public read-only property Request content-type. Null is returned if this information is not available. public string getContentType ( )

$bodyParams public property The request parameters given in the request body. public array getBodyParams ( )public void setBodyParams ( $values )