Session ManagementIntermediateUnlock via course or plan

CSRF Tokens & Request Origin

Stop cookie-authenticated CSRF with synchronizer tokens plus SameSite and Origin/Referer checks.

This room unlocks when you enrol in a linked course or have a matching Learn plan. No separate lab checkout — practice stays inside the track.