Optimistic about your website-common WEB security terms-CSRF attacks

Optimistic about your website-common WEB security terms-CSRF attacks
1. A brief description of CSRF (Cross-site request forgery, also known as "one click attack" or session riding, usually abbreviated as CSRF or XSRF, is a type of malicious use of websites. CSRF uses trusted websites by disguising requests from trusted users. 2. Common Features of CSRF rely on user identification hazards websites use website's trust in user identification to spoof users' browsers and send HTTP requests to target sites. 3. System-level prevention of CSRF modification to all users do not trust the data. Other methods 1. Page token issuance; 2. Page permission authentication; 3. Reverse query and verification of purchased items; 4 ,...