问ValidateAntiForgeryToken是通过POST自动实现的吗？

EN

[ValidateAntiForgeryToken]
public IActionResult Post(Model model)
{
    // ... etc
}

<form action="/MyController" method="post">
    <input name="__RequestVerificationToken" type="hidden" value="fhTFfhkKNsdfhYazFtN6c4YbZAmsEwG0srqlUqqloi/OIJOIJoijojhishg" />
    <!-- rest of form here -->
</form>

<form
 asp-controller="MyController" 
 asp-action="MyAction" 
 asp-antiforgery="false" 
 method="post">