4 ms·
Why shouldn't you trust user-provided data to secure the same user's data? The potential attack is someone forging their own referer header in order to attack t
by eurleif 15y ago
Why shouldn't you trust user-provided data to secure the same user's data? The potential attack is someone forging their own referer header in order to attack themself.
- sdevlin 15y agoThe referer header can easily be forged. The whole point of a CSRF attack is to turn a user's credentials against him.