Cross-site request forgery (English Wikipedia)

Adam Barth, Collin Jackson, and John C. Mitchell, Robust Defenses for Cross-Site Request Forgery, Proceedings of the 15th ACM Conference on Computer and Communications Security, ACM 2008

adobe.com

Adamski, Lucas. "Cross-domain policy file usage recommendations for Flash Player - Adobe Developer Connection".

angularjs.org

docs.angularjs.org

"Cross Site Request Forgery (XSRF) Protection". AngularJS. Retrieved 2015-01-20.

archive.org

Ristic, Ivan (2005). Apache Security. O'Reilly Media. p. 280. ISBN 0-596-00724-8.

berkeley.edu

eecs.berkeley.edu

William Zeller; Edward W. Felten (October 2008). "Cross-Site Request Forgeries: Exploitation and Prevention" (PDF). Retrieved 29 May 2015.

cert.org

kb.cert.org

code.google.com

Downloads – hasc-research – hasc-research – Google Project Hosting. Code.google.com (2013-06-17). Retrieved on 2014-04-12.

defcon.org

Mike, Bailey (2009). "CSRF: Yeah, It Still Works…" (PDF). DEFCON.

djangoproject.com

docs.djangoproject.com

"Cross Site Request Forgery protection | Django documentation | Django". docs.djangoproject.com. Retrieved 2015-08-21.
"Cross Site Request Forgery protection". Django. Archived from the original on 2015-01-20. Retrieved 2015-01-20.

draytek.co.uk

"Security Advisory: CSRF & DNS/DHCP/Web Attacks". Draytek. May 2018. Retrieved 18 May 2018.

espacenet.com

worldwide.espacenet.com

"Enhanced cross-site attack prevention". Espacenet. European Patent Office. Retrieved 21 November 2019.

halls-of-valhalla.org

"Valhalla Articles - Cross-Site Request Forgery: Demystified".

hitb.org

conference.hitb.org

Sheeraj Shah (2008). "Web 2.0 Hacking Defending Ajax & Web Services" (PDF). HITB. Retrieved September 4, 2015.

ionos.com

"CSRF: Cross-site request forgery attacks explained". IONOS Digitalguide. Retrieved 2022-04-26.

isecpartners.com

Burns, Jesse (2005). "Cross Site Request Forgery: An Introduction To A Common Web Weakness" (PDF). Information Security Partners, LLC. Archived from the original (PDF) on 2013-01-21. Retrieved 2011-12-12.

jfoulds.com

Joseph Foulds, Passive monitoring login request forgery, Yahoo Archived 2014-12-22 at the Wayback Machine

microsoft.com

msdn.microsoft.com

"Making a Service Available Across Domain Boundaries".

mitre.org

cwe.mitre.org

Christey, Steve; Martin, Robert A. (May 22, 2007). "Vulnerability Type Distributions in CVE (version 1.1)". MITRE Corporation. Retrieved 2008-06-07.

mozilla.org

developer.mozilla.org

"SameSite cookies". Mozilla. 10 April 2023.

people.mozilla.org

Origin Header Proposal Archived 2016-03-08 at the Wayback Machine. People.mozilla.org. Retrieved on 2013-07-29.

neohaxor.org

Dynamic CSRF Archived 2010-02-13 at the Wayback Machine

owasp.org

cheatsheetseries.owasp.org

"Cross-Site Request Forgery (CSRF) Prevention Cheat Sheet". OWASP. Retrieved 2019-07-19.
"Double Submit Cookie defence". OWASP.

owasp.org

Owasp.org: Israel 2012/01: AJAX Hammer – Harnessing AJAX for CSRF Attacks Archived 2013-10-01 at the Wayback Machine

pentestmonkey.net

"Cross-Site Request Forgery For POST Requests With An XML Body". pentestmonkey. Retrieved September 4, 2015.

portswigger.net

"What is CSRF (Cross-site request forgery)? Tutorial & Examples". portswigger.net. Retrieved 2019-11-04.

scmagazine.com

Washkuch Jr., Frank (October 17, 2006). "Netflix fixes cross-site request forgery hole". SC Magazine. Retrieved 2019-02-11.

secunia.com

"Secunia Advisory SA22467". Secunia. 19 October 2006. Retrieved 11 September 2012.

shiflett.org

Shiflett, Chris (December 13, 2004). "Security Corner: Cross-Site Request Forgeries". php|architect (via shiflett.org). Retrieved 2008-07-03.

synopsys.com

"What is Cross-Site Request Forgery (CSRF) and How Does It Work? | Synopsys".

washingtonpost.com

voices.washingtonpost.com

"Security Fix - Weaponizing Web 2.0".

web.archive.org

Burns, Jesse (2005). "Cross Site Request Forgery: An Introduction To A Common Web Weakness" (PDF). Information Security Partners, LLC. Archived from the original (PDF) on 2013-01-21. Retrieved 2011-12-12.
Joseph Foulds, Passive monitoring login request forgery, Yahoo Archived 2014-12-22 at the Wayback Machine
Dynamic CSRF Archived 2010-02-13 at the Wayback Machine
Owasp.org: Israel 2012/01: AJAX Hammer – Harnessing AJAX for CSRF Attacks Archived 2013-10-01 at the Wayback Machine
"Cross Site Request Forgery protection". Django. Archived from the original on 2015-01-20. Retrieved 2015-01-20.
Origin Header Proposal Archived 2016-03-08 at the Wayback Machine. People.mozilla.org. Retrieved on 2013-07-29.
Schneider, Christian. "CSRF and same-origin XSS". Archived from the original on 2012-08-14. Retrieved 2012-04-21.

webappsecblog.com

Schneider, Christian. "CSRF and same-origin XSS". Archived from the original on 2012-08-14. Retrieved 2012-04-21.