Top "Csrf" questions

Cross Site Request Forgery is a malicious attack to exploit a website's trust in a user's browser.

devise user sign_in gives authentication error for CSRF token authenticity token

I am using devise (latest version - 3.2.0) with rails (latest version - 4.0.1) I'm doing simple authentication (without ajax or api) …

ruby-on-rails ruby-on-rails-4 devise csrf rails-api
CodeIgniter use CSRF protection only in some pages

What I want to do is to protect some sensitive forms from CSRF attack in codeigniter but not all pages. …

codeigniter codeigniter-2 csrf
How specifically does Laravel build and check a CSRF token?

I'm using Laravel's CSRF protection on my public site. However since Laravel uses a session to maintain this, I'm worried …

php laravel laravel-4 token csrf
How is using Synchronizer Token Pattern to prevent CSRF safe?

I have been reading about using a synchronizer token pattern to prevent CSRF (CSRF meaning Cross-site request forgery.), and I …

javascript security web csrf
Laravel + Vue.js (axios) - CSRF token mismatch

I have problem with csrf token in Laravel. Sometimes request POST (via axios) returns 419 code "CSRF token mismatch" but request …

laravel vue.js csrf csrf-token
getting csrf tokens for json post requests to a rails app

I have been playing around with using rest-client to access a rails app I have written. I've written a quick …

json ruby-on-rails-3.1 csrf rest-client
JWT and CSRF differences

I've been reading about JWT, and from what I understand, it's a token that the server sends after a user …

jwt csrf http-token-authentication
How to implement CSRF protection in Ajax calls using express.js (looking for complete example)?

I am trying to implement CSRF protection in an app built using node.js using the express.js framework. The …

ajax node.js express connect csrf
ASP.NET MVC - ValidateAntiForgeryToken expiring

In a web page we provide a hyperlink (GET) that the User may click on to authenticate: @Html.ActionLink("Please …

asp.net-mvc asp.net-mvc-3 security csrf antiforgerytoken
Laravel 5.4 + Ajax equals 401 Unauthenticated

Whenever I try to assign a route from my api.php File I get a 401: Unauthenticated-Error. This is the route: …

jquery ajax laravel-5 csrf http-status-code-401