Web Security · Middle · Question 24 of 75
What is the double-submit cookie pattern?
- 1The server sends two session cookies with different names
- 2The user has to click the submit button twice
- ✓Correct answer: The server sets a random value in a cookie, and the client must also send it in a header or form field; the server compares both
Explanation
Another site can make the browser send the cookie but can't read it to copy into the header. The signed variant ties the value to the session.