+1 coinfor reading to the end
+1
Home / Glossary / XSRF
Glossary · Security

XSRF

Cross-site Request Forgery

In plain language

An attack that tricks your browser into sending a request to a site where you are already signed in.

The metaphor

Like a forged letter that arrives in your outbox with your own return address, and the mail carrier delivers it without asking.

Going deeper

How it works

  • You are signed in to a site in one tab.
  • A hostile page in another tab sends a hidden request to that site.
  • The site sees your valid session and treats it as you.
  • Developers block it with tokens and strict cookie settings.

How WILDCARD handles it

Website Security is a planned card for protecting business websites.

In practice
  • A hidden form changes an account setting.
  • A scan reports a missing protection on a form.
  • A browser blocks a cross-site request.

A question owners ask

Is this the same as CSRF?

Yes. XSRF and CSRF are two spellings of the same attack.

Where WILDCARD handles this
Website
Security
Coming soon
Related terms
WAFWeb Application Firewall

Something here sounds like your problem?

Every WILDCARD card exists to solve one named problem. Find yours.

Pick your problem →