/explore
|
You are here 
|
timtech.blog | ||
| | | | |
mathieu.fenniak.net
Cross-site request forgery (CSRF) is a type of security exploit where a user's web browser is tricked by a third-party site into performing actions on websites that the user is logged into. It is often a difficult attack to pull off, as it requires a number of factors to line up at once. Protecting against it requires good discipline and good design practices, especially when it comes to protecting Web APIs. Here's a brief example of a fictitious CSRF attack against a bank: |
|
| | | | | ||
| | | | |
www.vlent.nl
[AI summary] The article explains that Django's Cross-site request forgery (CSRF) protection relies on a 'Double Submit Cookie' mechanism requiring both a cookie and a form parameter, and demonstrates how the validation works and why it prevents malicious requests. |
|
| | | | | ||
| | | | |
bogs.io
CSRF stands for Cross-Site Request Forgery and is one of the most "popular" web application vulnerabilities |
|
| | | | | ||
| | | | |
kieranmcguire.uk
How do you get a Hugo site to set better security headers? With netlify.toml! |
|
| | | |||
