Glossary: Application and Credential Attacks, and AI Risks

anti-CSRF token

Also written: CSRF token

A random value a site puts in its own forms and checks on every change. An attacker's page cannot know the value, so a forged request is rejected.