Top "Csrf" questions

Cross Site Request Forgery is a malicious attack to exploit a website's trust in a user's browser.

WARNING: Can't verify CSRF token authenticity in case of API development

I am right now developing web APIs with Ruby on Rails. When the Rails app receives POST request without any …

ruby ruby-on-rails-3 api token csrf
Laravel 5: Handle exceptions when request wants JSON

I'm doing file uploads via AJAX on Laravel 5. I've got pretty much everything working except one thing. When I try …

php ajax exception laravel csrf
POST method always return 403 Forbidden

I have read Django - CSRF verification failed and several questions (and answers) related to django and POST method. One …

django post csrf django-csrf
Preventing CSRF with the same-site cookie attribute

I was surfing the web and found article Preventing CSRF with the same-site cookie attribute. As on link maintain We …

asp.net iis cookies csrf
Rails: How Does csrf_meta_tag Work?

I'm a PHP developer learning Ruby on Rails by reading Michael Hartl's tutorial. Here is a quote from the book, …

ruby-on-rails csrf
Django - {% csrf_token %} was used in a template, but the context did not provide the value

I'm new to Django and I'm still trying to get to grips with its features. I've created very simple project …

django csrf django-csrf
Disable CSRF validation for individual actions in Yii2

Is there a way to disable CSRF validation for some actions of the controller keeping it enabled for the other …

csrf yii2
How to exempt CSRF Protection on direct_to_template

I have a flow in my django application in which I redirect the user to another service (e.g. PayPal) …

django csrf
In Laravel 5, How to disable VerifycsrfToken middleware for specific route?

I am using Laravel 5 for developing an app. My app is connected with VendHQ API and I am intended to …

php laravel laravel-5 csrf
Rails CSRF Protection + Angular.js: protect_from_forgery makes me to log out on POST

If the protect_from_forgery option is mentioned in application_controller, then I can log in and perform any GET …

ruby-on-rails angularjs csrf protect-from-forgery