Daily Term: Cross-Site Request Forgery
Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) is an attack where a malicious site tricks a user into performing unwanted actions on a trusted site where they’re authenticated. For example, a malicious site might submit a hidden form to transfer money from the user’s bank account if they’re logged in. CSRF is prevented by using anti-CSRF tokens, requiring user confirmation for sensitive actions, and validating the origin of requests.
Date: 2025-10-31