CSRF Attacks and Web Forms
Posted by: youve been HAACKED,
on 02 Apr 2009 |
View original | Bookmarked: 0 time(s)
In my last blog post, I walked step by step through a Cross-site request forgery (CSRF) attack against an ASP.NET MVC web application. This attack is the result of how browsers handle cookies and cross domain form posts and is not specific to any one web platform. Many web platforms thus include their own mitigations to the problem. It might seem that if youre using Web Forms, youre automatically safe from this attack. While Web Forms has many mitigations turned on by default, it turns out that...