Q
What is CSRF (Cross-Site Request Forgery)?
-
A
Tricking a logged-in user's browser into sending an unwanted request to a site where the user is authenticated
-
B
Guessing passwords
-
C
Stealing a database through SQL
-
D
Injecting scripts into pages
Correct Answer:
A. Tricking a logged-in user's browser into sending an unwanted request to a site where the user is authenticated
Explanation:
The defenses are anti-CSRF tokens, SameSite cookies, and checking the Origin header.