/explore
|
You are here 
|
fosterelli.co | ||
| | | | |
wouterj.nl
Cross-site Request Forgery (CSRF) is one of the traditional vulnerabilities that web applications have to deal with. Every web framework - including Symfony - supports CSRF protection out of the box. A lesser known vulnerability is Login CSRF, a special kind of CSRF attack. |
|
| | | | | ||
| | | | |
www.vlent.nl
[AI summary] The article explains that Django's Cross-site request forgery (CSRF) protection relies on a 'Double Submit Cookie' mechanism requiring both a cookie and a form parameter, and demonstrates how the validation works and why it prevents malicious requests. |
|
| | | | | ||
| | | | |
introvertmac.wordpress.com
What is CSRF "Cross-site request forgery, also known as one-click attack or session riding and abbreviated as CSRF (sometimes pronounced sea-surf) or XSRF, is a type of malicious exploit of a website where unauthorized commands are transmitted from a user that the website trusts." - Wikipedia CSRF is at 8th position in OWASP... |
|
| | | | | ||
| | | | |
smagin.fyi
I knew what is the forgery like but had to dig why the standard protection works. I still don't undertand a thing or two. |
|
| | | |||
