Ask me anything about your lessons or your code.
“What is a port?” · “Why is my code erroring?”
Cross-site request forgery. An attacker's page makes a victim's browser send a request to a site the victim is logged into, and the browser attaches the cookies automatically, so the request looks legitimate. The defense is a secret token in each form that the attacker's page has no way to read.