Skip to content

Glossary: Endpoint, Application and Email Security

CSRF (cross-site request forgery)

Also written: cross-site request forgery

An attack where a page on another site makes the victim's browser send a request, such as 'change the email address', to a site where they are signed in. The SameSite cookie attribute defends against it.

Where the book teaches it

Related terms

SameSitesecure cookie