/explore
|
You are here 
|
www.evil.blog | ||
| | | | |
blog.mindedsecurity.com
I don't really know if this is actually known, but I thought it was worth writing. In a few words : While other browsers do not allow partic... |
|
| | | | | ||
| | | | |
www.matuzo.at
An introduction to Cross Site Scripting and XSS prevention. |
|
| | | | | ||
| | | | |
blog.doyensec.com
Exploiting Client-Side Path Traversal to Perform Cross-Site Request Forgery - Introducing CSPT2CSRF |
|
| | | | | ||
| | | | |
mathieu.fenniak.net
Cross-site request forgery (CSRF) is a type of security exploit where a user's web browser is tricked by a third-party site into performing actions on websites that the user is logged into. It is often a difficult attack to pull off, as it requires a number of factors to line up at once. Protecting against it requires good discipline and good design practices, especially when it comes to protecting Web APIs. Here's a brief example of a fictitious CSRF attack against a bank: |
|
| | | |||
