Cross-site request forgery: CSRF or XSRF

All-in-One Guides:Web application security -- How to prevent attacks

Types of attacks

Cross-site request forgery: CSRF or XSRF

Display in sets of:

  • Cross-site request forgery: How this Web exploit works

    Ask the Expert -  Cross-site request forgery is a major threat to Web security, and most Web sites aren't equipped to handle this exploit. Expert Jeremiah Grossman explains how CSRF works.

  • Application threats: CSRF, injection attacks and cookie replay

    Learning Guide -  Web application exploits come in a variety of forms. There are a few that stand out: XSS, for example. But what about XSRF, which is only recently garnering the press is deserves? There are comparatively little resources for less famous exploits. But...

  • CSRF attack vector with Ajax serialization

    Tip -  Web 2.0 applications are increasingly at risk to cross-site request forgery (CSRF) attacks. Shreeraj Shah explains what those risks are and how you can prevent such attacks.