11.05.2014 Views

Advanced CSRF and Stateless Anti-CSRF - owasp

Advanced CSRF and Stateless Anti-CSRF - owasp

Advanced CSRF and Stateless Anti-CSRF - owasp

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Double Submit<br />

(<strong>CSRF</strong> protection)<br />

<strong>Anti</strong>-<strong>CSRF</strong> value<br />

as cookie ...<br />

... <strong>and</strong><br />

request parameter

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!