CSRF
Everything on SkillVeris tagged CSRF — collected across the glossary, study notes, blog, and cheat sheets.
7 resources across 3 libraries
Glossary Terms(1)
Study Notes(2)
State and CSRF Protection
How the state parameter defeats login CSRF in OAuth flows, the entropy and storage requirements that make it effective, and why it complements PKCE.
CSRF Explained and Prevention
Cross-Site Request Forgery tricks a logged-in user's browser into submitting an unwanted, state-changing request to a site it trusts, using the victim's own va…
Interview Questions(4)
How Do Cookies Work Over HTTP?
A cookie is a small piece of state a server asks a browser to store via the `Set-Cookie` response header, which the browser then automatically re-attaches on t…
What is CSRF?
CSRF (Cross-Site Request Forgery) is an attack where a malicious site tricks a victim's browser into sending an authenticated request to another site the victi…
What Is Clickjacking and How Do You Prevent It?
Clickjacking is an attack where a malicious page overlays or embeds a legitimate site inside a transparent or disguised iframe, tricking a user into clicking o…
What Is the SameSite Cookie Attribute and How Does It Prevent CSRF?
SameSite is a cookie attribute that tells the browser whether to include the cookie on requests originating from a different site than the one that set it, and…