Web Security · Middle · Question 28 of 75

What is login CSRF?

✓Correct answer: The attacker logs the victim into the attacker's account, so the victim's later actions and data go to that account
2Brute-forcing passwords through CSRF
3Stealing the login form's HTML

Explanation

For example, the victim saves a credit card or search history into the attacker's account. Login forms need CSRF protection too.

Further reading

Test yourself

Take the Web Security · Middle quiz: questions and options are shuffled, and you get a review of your mistakes at the end.