Glossary coding Term Page
CSRF
An attack that tricks a logged-in browser into sending unintended requests
Core Idea
CSRF is an attack that abuses a browser's existing login state to send unintended requests on the user's behalf. It matters especially when browsers automatically attach cookies to state-changing requests.
Why It Matters Here
Mathbong uses CSRF when discussing cookie-based auth, origin checks, and safe state-changing APIs. It shows why "the browser sends it automatically" can become a security problem.