in src/DeloitteDigital.Atlas/Mvc/Forms/ValidRenderingTokenAttribute.cs [10:17]
public override bool IsValidForRequest(ControllerContext controllerContext, MethodInfo methodInfo)
{
var rendering = RenderingContext.CurrentOrNull;
if (rendering == null) return false;
Guid postedId;
return Guid.TryParse(controllerContext.HttpContext.Request.Form[Constants.Uid], out postedId) && postedId.Equals(rendering.Rendering.UniqueId);
}