Glossary · Security
Cross-Site Request Forgery(CSRF)
An attack that abuses a user's authenticated session to perform actions they did not intend, by tricking their browser into making a request.
Browse all definitionsIn detail
Cross-Site Request Forgery (CSRF) is a class of attack where a logged in user is tricked into clicking a link or visiting a page that triggers their browser to send a request to a target site, carrying their session cookies. The target site sees an authenticated request and processes it as legitimate. Modern defences include the SameSite cookie attribute (now Lax by default in browsers), anti-CSRF tokens on state changing requests, and checking the Origin or Referer header.
Apply the definition
Want to talk through how this applies to your business?
Start with the decision in front of you. We will help map the fit.
Straight answers · no pitch deck · no commitment