Multiple choice › Cross-site request forgery
Cross-site request forgery
1. Cross-site request forgery
Which control is designed specifically to stop cross-site request forgery (CSRF)?
- Compressing images on the page
- A unique anti-CSRF token checked on each state-changing request
- A longer domain name
- Minifying the JavaScript files
Answer
B
CSRF tricks a logged-in user's browser into sending an unwanted request. A secret per-session token the attacker cannot know defeats it.