input
<input type="hidden" th:name="${_csrf.parameterName}" th:value="${_csrf.token}" />
meta
<meta name="_csrf" th:content="${_csrf.token}"/> <meta name="_csrf_header" th:content="${_csrf.headerName}"/>
헤더
<th:block th:remove="tag"> <input type="hidden" name="${_csrf.headerName}" value="${_csrf.token}"/> </th:block>