I am new to Grav and I have this INVALID SECURITY TOKEN on local development environment. I searched the forum and GitHub and there is no answer that worked in my case. This is dramatic as I can’t work on admin on local environment.

My question is simple: is there a setting to remove this non working piece of code?


Do you get the error when you access any page or just specific ones in your local environment? Are you using HTTPS? Do you see the error in your PHP logs or in the browser?

You’ll always get more and better responses if you provide very clear details. Also, try the Slack channel. If you find the answer elsewhere, please update this thread.