/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 timtech.blog
CSRF When You Least Expect It.
| | www.sjoerdlangkemper.nl
Cross site request forgery (CSRF)
2.4 parsecs away

Travel
| | This article describes how cross site request forgery works, how sites defend against it and how to bypass these defenses.
| | www.vlent.nl
How does the Django Cross-site request forgery protection work? | Mark van Lent's weblog
2.1 parsecs away

Travel
| | [AI summary] The article explains that Django's Cross-site request forgery (CSRF) protection relies on a 'Double Submit Cookie' mechanism requiring both a cookie and a form parameter, and demonstrates how the validation works and why it prevents malicious requests.
| | mathieu.fenniak.net
Is your Web API susceptible to a CSRF exploit? | Mathieu Fenniak
2.2 parsecs away

Travel
| | Cross-site request forgery (CSRF) is a type of security exploit where a user's web browser is tricked by a third-party site into performing actions on websites that the user is logged into. It is often a difficult attack to pull off, as it requires a number of factors to line up at once. Protecting against it requires good discipline and good design practices, especially when it comes to protecting Web APIs. Here's a brief example of a fictitious CSRF attack against a bank:
| | introvertmac.wordpress.com
Understanding CSRF attacks | what I'm breaking...
6.3 parsecs away

Travel
| What is CSRF "Cross-site request forgery, also known as one-click attack or session riding and abbreviated as CSRF (sometimes pronounced sea-surf) or XSRF, is a type of malicious exploit of a website where unauthorized commands are transmitted from a user that the website trusts." - Wikipedia CSRF is at 8th position in OWASP...