Mixmax Blog company blog

Securing your API: a modern alternative to CSRF tokens

by Eli Skeggs mixmax.com published 2017-06-13

Cross-Site Request Forgery (CSRF) allows an attacker to make unauthorized requests on behalf of a user. We tackle CSRFs while allowing a subset of Cross-Origin requests.

Points

156

HN comments

56

Submissions

1

Cited by

0 commenters

Security & PrivacyWeb & Frontend2017

Related posts from the same era

Announcing the first SHA-1 collision

Google Security Blog20173,030 points485 commentscited by 13 details

Why I’m done with Chrome

Matthew Green20182,357 points838 commentscited by 4 details

Reading privileged memory with a side-channel

GGoogle Project Zero20182,334 points594 commentscited by 26 details

Accidentally Stopping a Global Cyber Attack

MalwareTech20171,981 points338 commentscited by 8 details

1.1.1.1: Fast, privacy-first consumer DNS service

Cloudflare Blog20181,895 points657 commentscited by 23 details

Why Raspberry Pi Isn't Vulnerable to Spectre or Meltdown

Raspberry Pi Blog20181,603 points215 commentscited by 10 details