Introduction to Cross-Site Request Forgery (XSRF)
Explore the mechanisms behind cross-site request forgery (XSRF) attacks and understand why servers trusting browsers can be exploited. Learn how to implement hidden form inputs with secret tokens to differentiate legitimate requests from forged ones, and why preventing XSRF requires ensuring defenses against related vulnerabilities like cross-site scripting.
We'll cover the following...
We'll cover the following...
If XSS is a case of a browser trusting JavaScript from the server too much, XSRF is a case of a server trusting a browser too much.
Let’s go back to our ...