An attack that tricks a user into sending an unintended request.
Short for Cross-Site Request Forgery. It abuses a logged-in user's session to make them unknowingly perform an action. A common defense issues a hard-to-guess token (a CSRF token) with each request and verifies it came from the legitimate form before acting on it.
© 2026 ITBGM