browse/
2 results
security/csrf-why-a-request-carrying-your-cookie-isn-t-proof-that-you-sent-it.md
CSRF: why a request carrying your cookie isn't proof that you sent it
Log in to your bank in one tab, open a stranger's page in another, and a hidden form can make your browser send money. The attacker never…
web/cookies-how-a-website-remembers-you-between-requests.md
Cookies: how a website remembers you between requests
The web forgets you after every request, so how does a site know you are still logged in? With a cookie: a small name and value the server…