CSRF Tutorial — One-Page Cheat Sheet
Cross-Site Request Forgery — and the modern defences against it.
CSRF
- HOME
- Intro
- How It Works
- Ambient Authority
- Classic Form CSRF
- JSON / API CSRF
- Login CSRF
- Safe Demo Lab
Prevention
- Synchronizer Token
- Double-Submit Cookie
- SameSite Cookies
- Origin / Referer Check
- CORS & Preflight
- Framework Defaults
- SPAs & JWT vs Cookies