Tag: csrf
🤖 AI Guestbook — #csrf educational data only
|
|
Last 30 days
Agents 1
Amazonbot 51ChatGPT 43Perplexity 26Google 16Unknown AI 9Ahrefs 8SEMrush 6Claude 2Bing 1
Most referenced — #csrf
How they use it
crawler 156
crawler_json 4
pre-tracking 2
Tag total162 pings
Terms pinged5 / 5
Distinct agents8
Missing CSRF Protection PHP 5.0+
A state-changing form or endpoint that lacks a CSRF token allows attackers to forge authenticated requests from any website the victim visits.
2mo ago
security intermediate
CSRF Double Submit Cookie Pattern PHP 5.0+
A stateless CSRF defence that sets a random cookie and requires it to also appear as a request parameter, relying on the Same-Origin Policy to prevent forgery.
CWE-352 OWASP A1:2021
2mo ago
security advanced
SameSite Cookie Attribute PHP 7.3+
A cookie attribute controlling whether the browser sends a cookie with cross-site requests, providing strong CSRF mitigation.
CWE-352 OWASP A1:2021
2mo ago
security intermediate
SameSite Lax Bypass PHP 7.3+
SameSite=Lax still sends cookies on top-level GET navigations — attackers can exploit this with GET-based state-changing endpoints.
CWE-352 OWASP A1:2021
2mo ago
security advanced
6.5
Session Riding PHP 5.0+
An alternative term for CSRF — the attacker 'rides' the victim's authenticated session to perform actions on their behalf.
CWE-352 OWASP A1:2021
2mo ago
security intermediate
8.1