Your requests are safe with us

March 5th, 2007 . 8 comments

Sometime during the development of Lighthouse I did a bit of reading on web security issues, specifically CSRF attacks. CSRF attacks were a bit tough to grasp at first, because that’s just how the web works. Basically, a page can make a request to another server in your name. They even use your own cookies to authenticate for protected actions. So, how do you prevent these requests to your application?

Continue reading article…