The response that I'm getting in JMeter vs Browser's Network tab response doesn't match. There's a CSRF token but it's not placed on a hidden input tag it's inside a JS var and is being returned when page is accessed.
I'm using a Regular Expression Extractor
but I'm not sure if I get the correct CSRF value
So the script looks like this:
<script type="text/javascript">
var csrf_token = "CSRFTokenHere"
And my Regular Expression Extractor looks like this:
window.csrf_token = '(.+?)';