Web Security · Junior · Question 28 of 75

What is cross-site request forgery (CSRF)?

1Stealing the CSS of another site
2Sending too many requests to crash a server
✓Correct answer: A malicious site makes the victim's browser send a request to your site, and the browser attaches the victim's cookies

Explanation

The attacker can't read the response, but the request itself (a transfer or a password change) runs as the logged-in user.

Further reading

Test yourself

Take the Web Security · Junior quiz: questions and options are shuffled, and you get a review of your mistakes at the end.