/explore
|
You are here |
www.evil.blog | ||
| | | | |
smagin.fyi
Why do we have both CSRF protection and CORS? |
|
| | | | | ||
| | | | |
timtech.blog
Fun with Cross-Site Request Forgery (CSRF) in a creative Web Timing Attack scenario, highlighting the risks inherent to SameSite=None session cookies. |
|
| | | | | ||
| | | | |
introvertmac.wordpress.com
What is CSRF "Cross-site request forgery, also known as one-click attack or session riding and abbreviated as CSRF (sometimes pronounced sea-surf) or XSRF, is a type of malicious exploit of a website where unauthorized commands are transmitted from a user that the website trusts." - Wikipedia CSRF is at 8th position in OWASP... |
|
| | | | | ||
| | | | |
www.paritybit.ca
Detailing how I migrated my Debian 10 server running nginx to OpenBSD with httpd and relayd. |
|
| | | |||