Enforce custom header on formdata requests to protect against CSRF attack. #6188
Description
By default we should enforce an extra header on formsdata request called graphql-preflight.
jaydenseric/graphql-multipart-request-spec#64 (comment)
{{ message }}