hemanth.hm
Posted on
Explain CSRF like I'm five.
For further actions, you may consider blocking this person and/or reporting abuse
5 Websites To Learn Frontend Web Development Faster
In this article, Bentil Shadrack has curated 5 resourceful sites that will help you better you web development skills really fast.
Read next
AWS Security Stories #04.4: OWASP - Injection
Sedat SALMAN -
Building Web Applications with React and Python
Kostiantyn Boskin -
ente Auth
ente -
Preventing Installing Composer Dependencies with Known Security Vulnerabilities
Ash Allen -
Top comments (1)
CSRF (Cross Site Request Forgery) is also known as Sea-Surf or Session Riding. It's is a form of trick that bad folks play on the browser in order to get it to do unexpected things in applications that you're already logged in.
For example, imagine you were logged into your Supercell game on the internet. You get an e-mail saying "Click here to get 500 gems for free!". Clicking on the text, on the contrary, will actually initiate a request to Supercell to transfer all your gems to the hacker's account. Now, along with the request, the browser always sends the cookies to Supercell as well. Supercell verifies if the cookies are valid (which they are because you just logged in!), Supercell will trust the browser and the request and doesn't know that this is not what you wanted. They will go ahead and execute this instruction thinking this is what you wanted to do.
This is a CSRF. The browser & Supercell got tricked into doing something they shouldn't have done. There are multiple ways to prevent yourself and your website from a CSRF attack but that's a conversation for when you're 10. For now, stay away from spammy links. :D