Questions tagged [csrf]

The tag has no usage guidance.

1 question with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
19 votes
0 answers
285 views

Avoid possible CSRF attacks by saving sort selection only when actually clicking

TL;DR: by storing the sort selection (active, newest, votes) in the page itself when getting a querystring parameter, SE is exposing its users to a possible CSRF attack which can change that sort ...
Shadow Wizard Love Zelda's user avatar