title: Can spams see/use javascript?
body: <p>My question is obvious. Can spams (I mean blog spams) make use of javascript on my site?</p>
  
  <p>For example "Laravel" needs csrf code on forms. If I pass csrf code as a javascript variable and append the code using jquery append method into the form, will spams be able to submit the form?</p>