Hacker News Reader

bullshit. any site with a form needs a cookie, unless the site is stupid. any site that tries to use post requests might need some.

heck even the confirmation or storing which cookies should be saved needs a fucking cookie.

I have a form on my site. My site has no cookies.

I have no issues.

If you don't even have a CSRF you actually probably have an issue that you are not aware of.

It's an email signup form so it's fine.

no you don't unless authentication is needed. How is post request and cookie even related? It is simple web dev 101.

You need to store some kind of state if you want to protect the form from CSRF attacks. You usually want to protect the form.

You don't need a cookie for that though... Even a window variable would suffice