Questions about this topic? Sign up to ask in the talk tab.

XSRF

From NetSec
Revision as of 15:52, 18 December 2010 by WillieArce (Talk | contribs)

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search

X(cross) Site Request Forgery

This is a combination of an XSS attack and a CSRF attack. Typically the XSS contains code which would manipulate the user's browser in the context of an authenticated session with the actual appropriate http referrer in the HTTP request. This will bypass certain form validation techniques.