title: Cross-Site Request Forgery (CSRF)
category: page
slug: cross-site-request-forgery-csrf
sortorder: 0458
toc: False
sidebartitle: CSRF
meta: Cross-Site Request Forgery is a type of web app vulnerability that forces users to execute unwanted actions when authenticated to an application.


Cross-Site Request Forgery is a type of web app vulnerability that forces users to execute unwanted actions when authenticated to an application.


### Cross-Site Request Forgery (CSRF) resources
* [Preventing cross-site attacks using same-site cookies](https://blogs.dropbox.com/tech/2017/03/preventing-cross-site-attacks-using-same-site-cookies/)
  explains how Dropbox's engineering team rolled out their same-site
  cookie defense that augments other CSRF protections for users.

* [Securing your site like it's 1999](https://24ways.org/2018/securing-your-site-like-its-1999/)
  covers many common web application vulnerabilities including Cross-Site 
  Request Forgery issues.

