/explore
|
You are here 
|
bogs.io | ||
| | | | |
smagin.fyi
|
|
| | | | | Why do we have both CSRF protection and CORS? | |
| | | | |
www.smashingmagazine.com
|
|
| | | | | Web application developers today need to be skilled in a multitude of disciplines. It's necessary to build an application that is user friendly, highly performant, accessible and secure, all while executing partially in an untrusted environment that you, the developer, have no control over. I speak, of course, about the User Agent. Most commonly seen in the form of a web browser, but in reality, one never really knows what's on the other end of the HTTP connection. | |
| | | | |
www.vlent.nl
|
|
| | | | | [AI summary] The article explains that Django's Cross-site request forgery (CSRF) protection relies on a 'Double Submit Cookie' mechanism requiring both a cookie and a form parameter, and demonstrates how the validation works and why it prevents malicious requests. | |
| | | | |
zacbrown.org
|
|
| | | Zac Brown's Nonsense is the source for all of Zac Brown's nonsense. If it's Zac Brown related, then it's probably nonsense. And if it's nonsense, then it's probably here! | ||
