csrf

I was unable to figure out how to successfully create csrf tokens for forms that exist outside of my punbb directory.

PunBB Forums chovy 2009

An attacker create a web page "csrf-attack. html" that > realize many > > > > > HTTP GET requests to the "Change Password" functionality.

SecuObs.com 2009

Both the domain (shiflett. org) and the path (csrf) are meaningful.

Planet XML 2009

I agree it's not advisable, but I was unable to figure out how to successfully create csrf tokens for forms that exist outside of my punbb directory.

PunBB Forums chovy 2009

A user authenticated in GMail visit the "csrf - > attack. html" page

SecuObs.com 2009

This becomes even more of a problem as these services integrate auto-posting to social networking sites. (think shortened link to dangerous site that propagates itself through csrf if you're in the doom and gloom mood.)

doggdot.us 2009

Both the domain (shiflett. org) and the path (csrf) are meaningful.

Dare Obasanjo aka Carnage4Life 2009

If i need to write patterns for csrf in an xml file, which can be then scanned by any scanner to analyse a particular web service, what would those patterns be like.

GNUCITIZEN Comments 2009

I agree it's not advisable, but I was unable to figure out how to successfully create csrf tokens for forms that exist outside of my punbb directory.

PunBB Forums 2009

James Burgess csrf attacks on web applications. real world examples, how to protect your apps.

BarCamp 2008