Top "Csrf" questions

Cross Site Request Forgery is a malicious attack to exploit a website's trust in a user's browser.

Same-Site flag for session cookie in Spring Security

Is it possible to set Same-site Cookie flag in Spring Security? And if not, is it on a roadmap to …

cookies spring-security csrf jsessionid samesite
Django CSRF framework cannot be disabled and is breaking my site

The django csrf middleware can't be disabled. I've commented it out from my Middleware of my project but my logins …

django csrf
what is the difference between X-XSRF-TOKEN and X-CSRF-TOKEN?

When use hidden field and when use header and why ? X-XSRF_TOKEN when we use? X-CSRF TOKEN when we use?

php security laravel-5.2 csrf
How does Angular handle XSS or CSRF?

How does Angular (2) handle XSS and CSRF. Does it even handle these attacks? If so, what do I have to …

angular typescript xss csrf
Jquery and Django CSRF Token

I have 2 html Pages. A Parent Page and a Child Page. The Child Page Contains a Submit Button that runs …

jquery python django csrf
How to handle CSRF Validation in Yii2 Framework?

I'm having problem with CSRF Validation in yii2. The validation works fine with the default form generated by the gii …

php csrf yii2
MultipartConfig with Servlet 3.0 on Spring MVC

How do I add in multipart configuration to a spring mvc app which uses controllers with methods annotated with RequestMapping? …

spring-mvc spring-security csrf multipart servlet-3.0
Rails 5 API protect_from_forgery

I have a Rails 5 API app (ApplicationController < ActionController::API). The need came up to add a simple GUI form …

ruby-on-rails security csrf ruby-on-rails-5