1
peeps

Cross-Site Request Forgeries (CSRF) explained - Erik Oppedijk - blog community

published 929 days, 5 hours, 18 minutes ago posted by http://jonnyboats.wordpress.com/http://jonnyboats.wordpress.com/ 930 days, 4 hours, 22 minutes ago
Friday, July 24, 2009 2:00:51 PM GMT Thursday, July 23, 2009 2:55:54 PM GMT

The Cross-Site Request Forgery is a relatively unknown and misunderstood attack, often mixed up with the Cross-Site Scripting (XSS) attack.

The biggest difference is the server where the malicious code is hosted. With a XSS attack, that code is injected in the trustedsite you are visiting (e.g. a Forum site, or any other site you trust and sign on to) and tries to steal information by sending it to another location:

With the CSRF the scenario is reversed, a user is tricked to a specially crafted URL ...

category: News | clicked: 1 | | source: blogs.infosupport.com | show counter code
tags: security

No comments yet, be the first one to post comment.

To post your comment please login or signup