/explore
|
You are here 
|
neilmadden.blog | ||
| | | | |
attilaolah.eu
This is intended to be a short list of things to check before you go publish awebsite or web app (or really, anything that interacts with a browser). Itstarts with... |
|
| | | | | ||
| | | | |
mathieu.fenniak.net
Cross-site request forgery (CSRF) is a type of security exploit where a user's web browser is tricked by a third-party site into performing actions on websites that the user is logged into. It is often a difficult attack to pull off, as it requires a number of factors to line up at once. Protecting against it requires good discipline and good design practices, especially when it comes to protecting Web APIs. Here's a brief example of a fictitious CSRF attack against a bank: |
|
| | | | | ||
| | | | |
www.sjoerdlangkemper.nl
This article describes how cross site request forgery works, how sites defend against it and how to bypass these defenses. |
|
| | | | | ||
| | | | |
davidlynch.org
Pretending innocence, I ask why all these high profile websites have their homepages covered in spinning images? CNN (screenshot) The New York Times (screenshot) Mashable (screenshot) Fox News (screenshot) Okay, obviously enough, I'm messing with them. But how can I do that? The answer is cross site scripting ("XSS"). XSS... |
|
| | | |||
