The Cross-Site Request Forgery FAQ 2007-01-16 23:09 Anonymous Coward
Submitted
by
Anonymous Coward
on Tuesday January 16 2007, @11:09PM
An anonymous reader writes ""Cross-site Request Forgery (also known as XSRF, CSRF, and Cross Site Reference Forgery) works by exploiting the trust that a site has for the user. Site tasks are usually linked to specific urls allowing specific actions to be performed when requested. If a user is logged into the site and an attacker tricks their browser into making a request to one of these task urls, then the task is performed and logged as the logged in user."
- Nothing More

