application-security
CSRF
Cross-Site Request Forgery
Definition
CSRF is an attack that tricks authenticated users into submitting unintended requests to a web application. The attacker crafts a malicious request that rides on the victim's active session, potentially changing account settings, making purchases, or modifying data.
Prevention typically involves anti-CSRF tokens and SameSite cookie attributes.
Can this ship? Are we exposed? Can you prove it?
Every CISO is asking these three questions. We answer them with facts, not guesses, from repository to runtime.