Questions tagged [csrf]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
8 votes
0 answers
89 views

Allow linking to a specific answer sort order on a question without also changing how subsequently-viewed questions are sorted [duplicate]

On the Photo of the Week competition posts on Photography, in order to reduce the benefit of votes on earlier competition submissions posted as answers, links to the competition have the sort-by-...
scottbb's user avatar
  • 391
19 votes
0 answers
285 views

Avoid possible CSRF attacks by saving sort selection only when actually clicking

TL;DR: by storing the sort selection (active, newest, votes) in the page itself when getting a querystring parameter, SE is exposing its users to a possible CSRF attack which can change that sort ...
Shadow Wizard Love Zelda's user avatar
17 votes
1 answer
152 views

Possible CSRF attack that cause answers to be added to "Top Answers" section

In Careers, adding answers to the "Top Answers" section of the profile is done via a pure GET request, e.g. http://careers.stackoverflow.com/cv/stack/add-answer/45190?answerId=227366&site=meta If ...
Shadow Wizard Love Zelda's user avatar
0 votes
1 answer
345 views

Why doesn't Stack Overflow use an AntiForgeryToken? [duplicate]

I was looking into the HTML forms of Stack Overflow and I realized that it doesn't use AntiForgeryToken. So I created a localhost page with the forms of Stack Overflow, posted something and it worked. ...
MuriloKunze's user avatar