Cross Site Request Forgery (CSRF)
Written by Ulises Gascón
Apr 08, 2020 — 1 min readThe Attack
Steps
Image from Christopher Makarem
The solution
This attack can be mitigated by using a different and personalized token in each request. In nodejs, the csurf library is highly recommended.
Implementation for:
Other
- The Recommendations for HTTP Headers in this guide
- The Best practices for Express in this guide
- The Best practices for React in this guide