samedi 17 décembre 2016

CSRF protection with verifying the origin header and referrer header

I saw a documentation about protecting CSRF attack. It's said to protect from CSRF, if origin header is presents, verify it value matches the target origin. If origin header is not presents, verify it referrer header. If both of them not presents, it suggests reject the request.

However, I don't know what is origin header and referrer header and what is their difference. Also, how they related to the CSRF protection?

Here is the link of the documentation: http://ift.tt/2hUDoTa Thanks for your kindly attention.




Aucun commentaire:

Enregistrer un commentaire