{"post":{"id":"60c01278d2660e41762e2e27","_id":"60c01278d2660e41762e2e27","coverImage":{"isPortrait":false,"url":"https://cdn.hashnode.com/res/hashnode/image/upload/v1623200163868/CnzoxWc7S.png","__typename":"PostCoverImage"},"slug":"understanding-cross-site-request-forgery-csrf-or-xsrf","readTime":12,"replyCount":1,"responseCount":1,"brief":"This post is also available in the following languages: Portuguese.\n\nOn the last article we have learned how we can prevent some Cross-Site Scripting (XSS) attacks by using proper sanitization techniques on our web server. Now, let's take a look at a...","subtitle":"The steps you need to take in order to increase the security of your web servers.","isFeatured":true,"contributors":[{"_id":"5f4fab2ba71a722802ba5ace","name":"Adriano Luz","photo":"https://cdn.hashnode.com/res/hashnode/image/upload/v1623792924606/MiLwCORDs.jpeg","username":"decode64","__typename":"User"}],"bookmarked":false,"views":1036,"url":"https://danilocesar.hashnode.net/understanding-cross-site-request-forgery-csrf-or-xsrf","totalReactions":76,"title":"Understanding Cross-Site Request Forgery (CSRF or XSRF)","dateAdded":"2021-06-09T00:59:36.814Z","cuid":"ckporleno01quxis1ccvq0omk","preferences":{"disableComments":false,"__typename":"PostPreferences"},"__typename":"Post","seo":{"title":null,"description":null,"__typename":"SEO"},"ogMetaData":{"image":null,"__typename":"OpenGraphMetaData"},"author":{"_id":"607b2c9cc99e200d08f7b5ce","name":"Danilo César","photo":"https://cdn.hashnode.com/res/hashnode/image/upload/v1665092428674/YR0DZqlUtk.png","isPro":false,"username":"danilocesar","__typename":"User","tagline":"Brazilian Developer 🇧🇷"},"coAuthors":[],"series":{"_id":"60a6a196fa38fa530ce2ec5e","slug":"programming-101","name":"Programming 101","cuid":"ckox6xeq100j2eks18ru25qpf","__typename":"Series"},"tags":[{"_id":"56744722958ef13879b94f1b","logo":"https://res.cloudinary.com/hashnode/image/upload/v1450469658/vdxecajl3uwbprclsctm.jpg","name":"Web Development","slug":"web-development","__typename":"Tag"},{"_id":"56744722958ef13879b94fb7","logo":"https://res.cloudinary.com/hashnode/image/upload/v1472744837/bnzk4gvspiy66dsmw9ku.png","name":"Security","slug":"security","__typename":"Tag"},{"_id":"56744722958ef13879b94fd9","logo":"https://cdn.hashnode.com/res/hashnode/image/upload/v1513177307594/rJ4Jba0-G.png","name":"PHP","slug":"php","__typename":"Tag"},{"_id":"56744721958ef13879b94cad","logo":"https://cdn.hashnode.com/res/hashnode/image/upload/v1607082785538/EryuLRriM.png","name":"JavaScript","slug":"javascript","__typename":"Tag"}],"publication":{"_id":"607b2d26eb2bd30d2d22637b","url":"https://danilocesar.hashnode.net","canonicalURL":"https://danilocesar.hashnode.net","title":"Danilo César","displayTitle":null,"isHeadless":false,"favicon":"https://cdn.hashnode.com/res/hashnode/image/upload/v1625590329663/_yKtWgqOO.png","headerColor":"","metaTags":null,"isTeam":false,"domainInfo":{"hashnodeSubdomain":"danilocesar","domain":null,"__typename":"DomainInfo"},"urlPattern":"SIMPLE","__typename":"Publication"},"comments":{"edges":[{"node":{"id":"60c20864d08dda55fee91806","author":{"_id":"5f4fab2ba71a722802ba5ace","name":"Adriano Luz","photo":"https://cdn.hashnode.com/res/hashnode/image/upload/v1623792924606/MiLwCORDs.jpeg","isPro":false,"username":"decode64","__typename":"User"},"content":{"html":"

ótimo artigo!

Most frameworks have some sort of CSRF protection built in but it is important for web developers to understand how it works.

\n","markdown":"ótimo artigo!\n\nMost frameworks have some sort of CSRF protection built in but it is important for web developers to understand how it works.","text":"ótimo artigo!\nMost frameworks have some sort of CSRF protection built in but it is important for web developers to understand how it works.\n","__typename":"Content"},"dateAdded":"2021-06-10T12:41:08.529Z","stamp":"ckpqw3fe70008zis172yyg0lm","totalReactions":1,"__typename":"Comment","replies":{"edges":[{"node":{"id":"60c2b3bc1e145957d5af61c9","author":{"_id":"607b2c9cc99e200d08f7b5ce","name":"Danilo César","photo":"https://cdn.hashnode.com/res/hashnode/image/upload/v1665092428674/YR0DZqlUtk.png","isPro":false,"username":"danilocesar","__typename":"User"},"content":{"html":"

Obrigado, Adriano Luz!

You're correct. Thank you for this contribution, and I'm glad you enjoyed this article.

\n","markdown":"Obrigado, @[Adriano Luz](@decode64)!\n\nYou're correct. Thank you for this contribution, and I'm glad you enjoyed this article.","text":"Obrigado, Adriano Luz!\nYou're correct. Thank you for this contribution, and I'm glad you enjoyed this article.\n","__typename":"Content"},"dateAdded":"2021-06-11T00:52:12.006Z","stamp":"ckprm7ko5049wcls1eju5bj27","totalReactions":0,"__typename":"Reply"},"__typename":"CommentReplyEdge"}],"pageInfo":{"hasNextPage":false,"endCursor":"MQ==","__typename":"PageInfo"},"__typename":"CommentReplyConnection"}},"__typename":"PostCommentEdge"}],"pageInfo":{"hasNextPage":false,"endCursor":"MQ==","__typename":"PageInfo"},"__typename":"PostCommentConnection"},"commenters":{"edges":[{"node":{"_id":"5f4fab2ba71a722802ba5ace","name":"Adriano Luz","photo":"https://cdn.hashnode.com/res/hashnode/image/upload/v1623792924606/MiLwCORDs.jpeg","isPro":false,"username":"decode64","__typename":"User"},"__typename":"PostCommenterEdge"}],"__typename":"PostCommenterConnection"}}}

Understanding Cross-Site Request Forgery (CSRF or XSRF)

2 comments