Glossary: Web App Security and Authentication

CSRF

Also written: cross-site request forgery, CSRF token, login CSRF

Another site making a signed-in browser send a request it never meant to, such as posting a note as Bloom. A secret per-session CSRF token that every form must send back refuses forged posts.