Where in the code does the developer need to add this CSRF validation check?

To ensure SFRA best practices and protect against request forgery, the developer introduced CSRF token generation in the customer address form:

To implement CSRF protection when the form is submitted, the developer needs to introduce the CSRF validation using one or both of these methods as applicable:

• validateRequest

• validateAjaxRequest

Where in the code does the developer need to add this CSRF validation check?
A . In the controller function that displays the form
B. In the middleware chain of the controller post route
C. In the controller function that handles the submitted form
D. In the model function that persists the form data

Answer: B