Skip to main content

Cookie Security Considerations for CSRF attacks

CSRF attacks, by definition, usually involve abusing the fact that the user is already logged in on a site: i.e that a malicious form can submit some request to your website, using the user's existing session.