Questions tagged [csrf]
The csrf tag has no usage guidance.
4
questions
8
votes
0
answers
88
views
Allow linking to a specific answer sort order on a question without also changing how subsequently-viewed questions are sorted [duplicate]
On the Photo of the Week competition posts on Photography, in order to reduce the benefit of votes on earlier competition submissions posted as answers, links to the competition have the sort-by-...
- 391
19
votes
0
answers
283
views
Avoid possible CSRF attacks by saving sort selection only when actually clicking
TL;DR: by storing the sort selection (active, newest, votes) in the page itself when getting a querystring parameter, SE is exposing its users to a possible CSRF attack which can change that sort ...
17
votes
1
answer
152
views
Possible CSRF attack that cause answers to be added to "Top Answers" section
In Careers, adding answers to the "Top Answers" section of the profile is done via a pure GET request, e.g. http://careers.stackoverflow.com/cv/stack/add-answer/45190?answerId=227366&site=meta
If ...
0
votes
1
answer
345
views
Why doesn't Stack Overflow use an AntiForgeryToken? [duplicate]
I was looking into the HTML forms of Stack Overflow and I realized that it doesn't use AntiForgeryToken. So I created a localhost page with the forms of Stack Overflow, posted something and it worked.
...
- 103