Security

What is CSRF?

Also called: cross-site request forgery

CSRF tricks a logged-in user’s browser into sending an unwanted request to a site that trusts its cookies, such as changing an email address. CSRF tokens and SameSite cookies prevent it.