Cross Site Request Forgery (CSRF)

Written by Ulises Gascón

Apr 08, 20201 min read

The Attack

Steps

CSRF sample workflow Image from Christopher Makarem

The solution

This attack can be mitigated by using a different and personalized token in each request. In nodejs, the csurf library is highly recommended.

Implementation for:

Other

Refs