Types of threats · Question 5 of 12
What characterises cross-site request forgery (CSRF)?
1 answer is correct. Easy
Show answer
Answer
- C A foreign page makes the victim's browser trigger an action
Explanation
With CSRF the attacker abuses the victim's existing login: the browser sends the session cookies automatically. The countermeasure is a secret token that only the own site knows and that is checked on every state-changing request.