How Do You Protect Against Cross-Site Request Forgery Attacks?
Share
Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
1. Use unique and unpredictable tokens within requests, such as anti-CSRF tokens.
2. Validate the origin of requests.
3. Implement Same-Site Cookies.
4. Use CAPTCHAs.
5. Implement HTTP Referrer checks.
6. Use HTTPS for all requests.
7. Avoid using GET requests for sensitive information.
8. Use a Web Application Firewall to detect and block malicious requests.