Top "Csrf" questions

Cross Site Request Forgery is a malicious attack to exploit a website's trust in a user's browser.

How do I include Django 1.2's CSRF token in a Javascript-generated HTML form?

I recently upgraded to Django 1.2.3 and my upload forms are now broken. Whenever I attempt to upload, I receive a "…

javascript django extjs csrf django-csrf
Why Same-origin policy isn't enough to prevent CSRF attacks?

First of all, I assume a backend that control inputs to prevent XSS vulnerabilities. In this answer @Les Hazlewood explain …

cookies jwt cross-domain csrf same-origin-policy
GWT RPC - Does it do enough to protect against CSRF?

UPDATE : GWT 2.3 introduces a better mechanism to fight XSRF attacks. See http://code.google.com/webtoolkit/doc/latest/DevGuideSecurityRpcXsrf.html …

security gwt csrf gwt-rpc
When the use of a AntiForgeryToken is not required /needed?

UPD: Same question asked on security.stackexchange.com and the answer I got is different. Please follow there, to get …

asp.net-mvc-3 csrf antiforgerytoken
Django - 403 Forbidden CSRF verification failed

I have a contact form in Django for my website and when I was testing it locally it was working …

python django csrf django-csrf
How to use Zend Framework Form Hash (token) with AJAX

I have included Zend_Form_Element_Hash into a form multiplecheckbox form. I have jQuery set to fire off an …

ajax zend-framework zend-form csrf
What is the right way to use angular2 http requests with Django CSRF protection?

In Angular1 the problem can be solved by configuring $http-provider. Like: app.config(function($httpProvider) { $httpProvider.defaults.xsrfCookieName = 'csrftoken'; $httpProvider.…

django csrf angular django-csrf
anti-CSRF token and Javascript

I'm trying to protect an application (php and lots of JS) from CSRF. I want to use tokens. A lot …

ajax security csrf antiforgerytoken
Unit testing controllers with CSRF protection enabled in Spring security

Recently we have introduced CSRF protection for our project which uses spring security 3.2. After enabling CSRF some of the unit …

spring-mvc junit spring-security csrf