Vulnerabilities
Difference Between Cross Site Scripting and Request Forgery: Core Mechanics
Cross-site scripting executes code in the user's browser, while request forgery tricks the browser into sending authenticated requests without user consent.
Everything Vuln Post has reported about application defense: 2 stories, newest first. Part of our Vulnerabilities coverage.
Cross-site scripting executes code in the user's browser, while request forgery tricks the browser into sending authenticated requests without user consent.
Treating all incoming data as hostile by default prevents the majority of logical flaws that attackers exploit to take control of your systems.