beginnertermWeb foundationsWeb foundations / Security / CSRF
BeginnerNot yet reviewed

CSRF

Cross-Site Request Forgery: an attack forcing an authenticated end-user to execute unwanted actions on a web app.

Definition

Cross-Site Request Forgery: an attack forcing an authenticated end-user to execute unwanted actions on a web app.

Use case

Using anti-CSRF tokens in form submission cookies to prevent unauthorized actions.

Related terms

Articles

Cross-site request forgery

OWASP · Article · link checked 2026-10-16

Tricking a logged-in browser into unwanted actions, and the token defense.

Suggest a change