3 ms·
What stops a user from writing a simple HTTP client to spoof the header?
by makkesk8 9y ago
What stops a user from writing a simple HTTP client to spoof the header?
- treve 9y agoThen that user can only 'hack themselves'. CSRF is a security vulnerability is because you can do a HTTP request on behalf of someone else, on someone else's browser, in someone else's session/security context.