Skip to content
Miraat·dweb developer journey, reflected

CSRF Defense

Tokens, SameSite cookies, double-submit, when same-origin is enough.

Core 25 minutes Prerequisites: OWASP Top 10 Deep Dive