浅谈CSRF

Discuss the CSRF

CSRF表示一系列的网页应用程序的攻击，它是利用内含的程序。这些攻击被称作“沉睡的巨人”，由于网页的脆弱，许多互联网网站都不能保护其免受攻击。在本文中，描述了CSRF的脆弱，介绍了保护网站免受CSRF攻击的方法，希望网页开发者能够留意这些攻击。

Cross-Site Request Forgery （CSRF） denotes a class of attacks on web applications that exploit implicit authentication processes. These attacks have been called the ＂sleeping giant＂ of web-based vulnerabilities, because many sites on the Internet fail to protect against them and because they have been largely ignored by the web development and security communities. In this paper, describes three basic CSRF vulnerabilities, and introduce some policies that are able to protect a site from CSRF attacks. We hope that web developers are unaware of this attacks.