AI engineering glossary · Web APIs HTTP
What is CSRF?
CSRF (also called Cross-Site Request Forgery): Cross-Site Request Forgery is an attack in which a malicious site makes a logged-in user's browser send an unwanted request to another site, relying on cookies being sent automatically. Defences include anti-forgery tokens and SameSite cookies.
CSRF: an example
A hidden form on a bad page submits a transfer request to your bank while your session cookie is active.
Related terms
More Web APIs HTTP terms
Where you learn it
CSRF is part of the AI Engineering Program, which teaches it with notes, a hands-on lab and an exam. The first lesson is free.