Building RESTful Web Services with .NET Core

Cross-site request forgery

Cross-site request forgery (CRSF) can also be shortened to XSRF. This is a common attack where the attacker infuses an unwanted action while the client is interacting (request/response) with the hosted application. Generally, attackers use malicious code to influence the interaction.

Malicious code is scripting code that downloads onto a web browser and executes, even without the knowledge of the authenticated user. For details, refer to https://www.techopedia.com/definition/4013/malicious-active-content.

Attackers are very smart, and they use different platforms to provide spurious links to malicious code. These links are very similar to the domain (website) that is under attack. Financial websites are the main ...