Cross-site request forgery (English Wikipedia)

Adam Barth, Collin Jackson, and John C. Mitchell, Robust Defenses for Cross-Site Request Forgery, Proceedings of the 15th ACM Conference on Computer and Communications Security, ACM 2008

adobe.com (Global: 1,631^st place; English: 1,239^th place)

Adamski, Lucas. "Cross-domain policy file usage recommendations for Flash Player - Adobe Developer Connection".

angularjs.org (Global: low place; English: low place)

docs.angularjs.org

"Cross Site Request Forgery (XSRF) Protection". AngularJS. Retrieved 2015-01-20.

archive.org (Global: 6^th place; English: 6^th place)

Ristic, Ivan (2005). Apache Security. O'Reilly Media. p. 280. ISBN 0-596-00724-8.

berkeley.edu (Global: 580^th place; English: 462^nd place)

eecs.berkeley.edu

William Zeller; Edward W. Felten (October 2008). "Cross-Site Request Forgeries: Exploitation and Prevention" (PDF). Retrieved 29 May 2015.

cert.org (Global: low place; English: low place)

kb.cert.org

code.google.com (Global: 4,942^nd place; English: 4,061^st place)

Downloads – hasc-research – hasc-research – Google Project Hosting. Code.google.com (2013-06-17). Retrieved on 2014-04-12.

defcon.org (Global: low place; English: low place)

Mike, Bailey (2009). "CSRF: Yeah, It Still Works…" (PDF). DEFCON.

djangoproject.com (Global: low place; English: low place)

docs.djangoproject.com

"Cross Site Request Forgery protection | Django documentation | Django". docs.djangoproject.com. Retrieved 2015-08-21.
"Cross Site Request Forgery protection". Django. Archived from the original on 2015-01-20. Retrieved 2015-01-20.

espacenet.com (Global: 800^th place; English: 676^th place)

worldwide.espacenet.com

"Enhanced cross-site attack prevention". Espacenet. European Patent Office. Retrieved 21 November 2019.

hitb.org (Global: low place; English: low place)

conference.hitb.org

Sheeraj Shah (2008). "Web 2.0 Hacking Defending Ajax & Web Services" (PDF). HITB. Retrieved September 4, 2015.

ietf.org (Global: 214^th place; English: 176^th place)

datatracker.ietf.org

Barth, Adam (April 2011). HTTP State Management Mechanism (Report). Internet Engineering Task Force.

ionos.com (Global: low place; English: low place)

"CSRF: Cross-site request forgery attacks explained". IONOS Digitalguide. Retrieved 2022-04-26.

isecpartners.com (Global: low place; English: low place)

Burns, Jesse (2005). "Cross Site Request Forgery: An Introduction To A Common Web Weakness" (PDF). Information Security Partners, LLC. Archived from the original (PDF) on 2013-01-21. Retrieved 2011-12-12.

jfoulds.com (Global: low place; English: low place)

Joseph Foulds, Passive monitoring login request forgery, Yahoo Archived 2014-12-22 at the Wayback Machine

microsoft.com (Global: 153^rd place; English: 151^st place)

msdn.microsoft.com

"Making a Service Available Across Domain Boundaries".

mitre.org (Global: low place; English: low place)

cwe.mitre.org

Christey, Steve; Martin, Robert A. (May 22, 2007). "Vulnerability Type Distributions in CVE (version 1.1)". MITRE Corporation. Retrieved 2008-06-07.

mozilla.org (Global: 1,686^th place; English: 1,293^rd place)

developer.mozilla.org

"SameSite cookies". Mozilla. 10 April 2023.

people.mozilla.org

Origin Header Proposal Archived 2016-03-08 at the Wayback Machine. People.mozilla.org. Retrieved on 2013-07-29.

neohaxor.org (Global: low place; English: low place)

Dynamic CSRF Archived 2010-02-13 at the Wayback Machine

owasp.org (Global: low place; English: low place)

cheatsheetseries.owasp.org

"Cross-Site Request Forgery (CSRF) Prevention Cheat Sheet". OWASP. Retrieved 2019-07-19.
"Double Submit Cookie defence". OWASP.

owasp.org

Owasp.org: Israel 2012/01: AJAX Hammer – Harnessing AJAX for CSRF Attacks Archived 2013-10-01 at the Wayback Machine

pentestmonkey.net (Global: low place; English: low place)

"Cross-Site Request Forgery For POST Requests With An XML Body". pentestmonkey. Retrieved September 4, 2015.

portswigger.net (Global: low place; English: low place)

"What is CSRF (Cross-site request forgery)? Tutorial & Examples". portswigger.net. Retrieved 2019-11-04.

scmagazine.com (Global: low place; English: low place)

Washkuch Jr., Frank (October 17, 2006). "Netflix fixes cross-site request forgery hole". SC Magazine. Retrieved 2019-02-11.

secunia.com (Global: low place; English: low place)

"Secunia Advisory SA22467". Secunia. 19 October 2006. Retrieved 11 September 2012.

shiflett.org (Global: low place; English: low place)

Shiflett, Chris (December 13, 2004). "Security Corner: Cross-Site Request Forgeries". php|architect (via shiflett.org). Retrieved 2008-07-03.

synopsys.com (Global: low place; English: low place)

"What is Cross-Site Request Forgery (CSRF) and How Does It Work? | Synopsys".

washingtonpost.com (Global: 34^th place; English: 27^th place)

voices.washingtonpost.com

"Security Fix - Weaponizing Web 2.0". Archived from the original on May 28, 2012.

web.archive.org (Global: 1^st place; English: 1^st place)

Burns, Jesse (2005). "Cross Site Request Forgery: An Introduction To A Common Web Weakness" (PDF). Information Security Partners, LLC. Archived from the original (PDF) on 2013-01-21. Retrieved 2011-12-12.
Joseph Foulds, Passive monitoring login request forgery, Yahoo Archived 2014-12-22 at the Wayback Machine
"Security Fix - Weaponizing Web 2.0". Archived from the original on May 28, 2012.
Dynamic CSRF Archived 2010-02-13 at the Wayback Machine
Owasp.org: Israel 2012/01: AJAX Hammer – Harnessing AJAX for CSRF Attacks Archived 2013-10-01 at the Wayback Machine
"Valhalla Articles - Cross-Site Request Forgery: Demystified". Archived from the original on January 29, 2014.
"Cross Site Request Forgery protection". Django. Archived from the original on 2015-01-20. Retrieved 2015-01-20.
Origin Header Proposal Archived 2016-03-08 at the Wayback Machine. People.mozilla.org. Retrieved on 2013-07-29.
Schneider, Christian. "CSRF and same-origin XSS". Archived from the original on 2012-08-14. Retrieved 2012-04-21.

webappsecblog.com (Global: low place; English: low place)

Schneider, Christian. "CSRF and same-origin XSS". Archived from the original on 2012-08-14. Retrieved 2012-04-21.

Cross-site request forgery (English Wikipedia)

adambarth.com (Global: low place; English: low place)

adobe.com (Global: 1,631st place; English: 1,239th place)

angularjs.org (Global: low place; English: low place)

docs.angularjs.org

archive.org (Global: 6th place; English: 6th place)

berkeley.edu (Global: 580th place; English: 462nd place)

eecs.berkeley.edu

cert.org (Global: low place; English: low place)

kb.cert.org

code.google.com (Global: 4,942nd place; English: 4,061st place)

defcon.org (Global: low place; English: low place)

djangoproject.com (Global: low place; English: low place)

docs.djangoproject.com

espacenet.com (Global: 800th place; English: 676th place)

worldwide.espacenet.com

hitb.org (Global: low place; English: low place)

conference.hitb.org

ietf.org (Global: 214th place; English: 176th place)

datatracker.ietf.org

ionos.com (Global: low place; English: low place)

isecpartners.com (Global: low place; English: low place)

jfoulds.com (Global: low place; English: low place)

microsoft.com (Global: 153rd place; English: 151st place)

msdn.microsoft.com

mitre.org (Global: low place; English: low place)

cwe.mitre.org

mozilla.org (Global: 1,686th place; English: 1,293rd place)

developer.mozilla.org

people.mozilla.org

neohaxor.org (Global: low place; English: low place)

owasp.org (Global: low place; English: low place)

cheatsheetseries.owasp.org

owasp.org

pentestmonkey.net (Global: low place; English: low place)

portswigger.net (Global: low place; English: low place)

scmagazine.com (Global: low place; English: low place)

secunia.com (Global: low place; English: low place)

shiflett.org (Global: low place; English: low place)

synopsys.com (Global: low place; English: low place)

washingtonpost.com (Global: 34th place; English: 27th place)

voices.washingtonpost.com

web.archive.org (Global: 1st place; English: 1st place)

webappsecblog.com (Global: low place; English: low place)

adobe.com (Global: 1,631^st place; English: 1,239^th place)

archive.org (Global: 6^th place; English: 6^th place)

berkeley.edu (Global: 580^th place; English: 462^nd place)

code.google.com (Global: 4,942^nd place; English: 4,061^st place)

espacenet.com (Global: 800^th place; English: 676^th place)

ietf.org (Global: 214^th place; English: 176^th place)

microsoft.com (Global: 153^rd place; English: 151^st place)

mozilla.org (Global: 1,686^th place; English: 1,293^rd place)

washingtonpost.com (Global: 34^th place; English: 27^th place)

web.archive.org (Global: 1^st place; English: 1^st place)