FormAction

Encoded action and browser method for an ordinary HTML form.

Prefer from or fromEither: route-derived actions accept only GET and POST, encode typed path parameters, and mark POST forms for Scalive CSRF-token injection. unsafe is an explicit escape hatch for already encoded or external targets and never requests CSRF protection, even for POST.

A checked action is input to http; it does not by itself authenticate, authorize, or validate the eventual request.