Daily IT Tip
Learn something new every day. One tip, one concept, one command at a time.
CSRF (Cross-Site Request Forgery)
An attack that tricks authenticated users into submitting unwanted requests to a web application they are logged into.
CSRF (Cross-Site Request Forgery) - An attack that tricks authenticated users into submitting unwanted requests to a web application they are logged into.
CSRF exploits the trust a website has in a user's browser. An attacker creates a page with a hidden form that submits to the target site. If the user is logged in, the browser sends their cookies, and the request succeeds.
Prevention includes CSRF tokens (unique per-session tokens in forms), SameSite cookie attribute, checking the Referer/Origin header, and requiring re-authentication for sensitive actions.
Learn more: Full glossary entry →
Related Resources
Share this tip
Get Daily IT Tips in Your Inbox
Join our newsletter and receive a new IT tip every day - Linux commands, DevOps tricks, security best practices, and more. Free, no spam, unsubscribe anytime.