CSRF protection works when the browser or the server strips away ambient session authority before a hostile page can spend it. These questions focus on cookie policy, tokens, preflights, and the request shapes that still matter in production.
0 / 6
What makes CSRF possible in the first place?
Press 1 to 4 to pick an answer