What does a CSRF attack exploit?
- A The browser automatically sending cookies with requests to a site the user is logged into
- B A weak password policy
- C An unpatched server
- D An open network port
Answer
The browser automatically sending cookies with requests to a site the user is logged into
A synchroniser token compared with hash_equals, plus the sameSite cookie attribute, are the standard defences.





