Google

@csrf

Top of header (after opening header)

Bottom of header (before closing header)

Top of Body (after opening body tag)