freshlybakedca.ke
We were previously vulnerable to cross-site request forgery: someone giving us a link that ran an action from somewhere else. To fix this, we can tie a token which is sent along with all our actions to a session. That way, an attacker won't know the correct token to run an action on behalf of a user
History
6 rounds
0 comments
a.starrysky.fyi
submitted
#5
1 commit
expand
collapse
fix(m/security): block Cross-Site Request Forgery
We were previously vulnerable to cross-site request forgery: someone
giving us a link that ran an action from somewhere else. To fix this, we
can tie a token which is sent along with all our actions to a session.
That way, an attacker won't know the correct token to run an action on
behalf of a user
expand 0 comments
closed without merging
a.starrysky.fyi
submitted
#4
1 commit
expand
collapse
fix(m/security): block Cross-Site Request Forgery
We were previously vulnerable to cross-site request forgery: someone
giving us a link that ran an action from somewhere else. To fix this, we
can tie a token which is sent along with all our actions to a session.
That way, an attacker won't know the correct token to run an action on
behalf of a user
expand 0 comments
a.starrysky.fyi
submitted
#3
1 commit
expand
collapse
fix(m/security): block Cross-Site Request Forgery
We were previously vulnerable to cross-site request forgery: someone
giving us a link that ran an action from somewhere else. To fix this, we
can tie a token which is sent along with all our actions to a session.
That way, an attacker won't know the correct token to run an action on
behalf of a user
expand 0 comments
a.starrysky.fyi
submitted
#2
1 commit
expand
collapse
fix(m/security): block Cross-Site Request Forgery
We were previously vulnerable to cross-site request forgery: someone
giving us a link that ran an action from somewhere else. To fix this, we
can tie a token which is sent along with all our actions to a session.
That way, an attacker won't know the correct token to run an action on
behalf of a user
expand 0 comments
a.starrysky.fyi
submitted
#1
1 commit
expand
collapse
fix(m/security): block Cross-Site Request Forgery
We were previously vulnerable to cross-site request forgery: someone
giving us a link that ran an action from somewhere else. To fix this, we
can tie a token which is sent along with all our actions to a session.
That way, an attacker won't know the correct token to run an action on
behalf of a user
expand 0 comments
a.starrysky.fyi
submitted
#0
1 commit
expand
collapse
fix(m/security): block Cross-Site Request Forgery
We were previously vulnerable to cross-site request forgery: someone
giving us a link that ran an action from somewhere else. To fix this, we
can tie a token which is sent along with all our actions to a session.
That way, an attacker won't know the correct token to run an action on
behalf of a user