Cross-Domain requests describe requests from one domain to another. A typical example of this are Facebook information on another domain, either to display a user’s friends on the site, or even to automatically log a user into the site if still logged into Facebook. But this example is obviously not malicious. There are two types [...]

Categories: Browsing, Firefox

Cross-site Request Forgery are carried out from a computer system or user that is trusted by a website. Cookies that do not expire after a user closes the website or web browser are one of the most common forms of trust that can be exploited by cross-site request forgery attacks. The attacker needs to use [...]

Categories: Google