Cross-site Request Forgery
Last updated
What is Cross-site Request Forgery?
Cross-site request forgery, also known as one-click attack or session riding and abbreviated as CSRF or XSRF, is a type of malicious exploit of a website or web application where unauthorized commands are submitted from a user that the web application trusts. There are many ways in which a malicious website can transmit such commands; specially-crafted image tags, hidden forms, and JavaScript fetch or XMLHttpRequests, for example, can all work without the user's interaction or knowledge. Unlike cross-site scripting (XSS), which exploits the trust a user has for a particular site, CSRF exploits the trust that a site has in a user's browser.
Free resources to learn Cross-site Request Forgery
More in stage 18: Developer Tools
- Developer Tools
- Angular CLI
- DevTools
- Local Setup
- Language Service
- Deployment
- Libraries
- End-to-End Testing
- Using Libraries
- Schematics
- Creating Libraries
- Build Environments
- Cross-site Scripting
- HTTP Vulnerabilities
- CLI Builders
- Sanitization
- AoT Compilation
- Trusting Safe Values
- HttpClient CSRF
- Enforce Trusted Types
- XSRF protection
- Cross-site Script Inclusion
- NGXS
- NgRx
- RxJS Interop
- Inputs as Signals
- Queries as Signals
- Model Inputs
Cross-site Request Forgery: common questions
Can I learn Cross-site Request Forgery in Hindi?
This lesson is written in English. Once you sign in, open it in the interactive course and ask the AI tutor to explain Cross-site Request Forgery in Hindi or Hinglish. The tutor answers from this lesson’s own text, so it stays on the syllabus, and it runs on your own Google, OpenAI or Anthropic key.
Is this Cross-site Request Forgery tutorial for beginners?
It is lesson 110 of 158 in the free Angular roadmap, in stage 18, Developer Tools. If you are new to Angular, start from stage 1 and come back here in order; if you already know the earlier stages, this lesson stands on its own.