Skip to content

Security

CSRF

Abbreviation for Cross-Site Request Forgery

In short and in plain language

CSRF is an attack that comes from a foreign site.

A user is logged in. The foreign site tricks the user's browser into sending unwanted requests.

To stop this, forms often use a secret token. Each session has its own.

Definition
CSRF is an attack in which a foreign site tricks a logged-in user's browser into making unwanted requests. Forms often use a secret token per session as a countermeasure.