Glossary
Cross-Site Request Forgery (CSRF)
A web attack that tricks an authenticated user's browser into submitting an unwanted request to a site where they are logged in — changing an email address, transferring funds — by abusing the browser's automatic inclusion of session cookies. Defenses include anti-CSRF tokens and SameSite cookie attributes.