csrf-attack

CSRF Attacks: How They Work and How Tokens Stop Them

A CSRF attack rides a logged-in user's browser to forge requests they never meant to send. Here is the mechanism and why anti-CSRF tokens defeat it.