Full Stack Python

All topics | Blog | Supporter's Edition | @fullstackpython | Facebook | What's new?

Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery is a type of web app vulnerability that forces users to execute unwanted actions when authenticated to an application.

Cross-Site Request Forgery (CSRF) resources

Preventing cross-site attacks using same-site cookies explains how Dropbox's engineering team rolled out their same-site cookie defense that augments other CSRF protections for users.
Securing your site like it's 1999 covers many common web application vulnerabilities including Cross-Site Request Forgery issues.

What Python subject do you want to learn next?

What're these NoSQL data stores hipster developers keep talking about?

What tools exist for monitoring a deployed web app?

What can I do to mitigate security vulnerability in my web app?

Table of Contents

1. Introduction 2. Development Environments 3. Data 4. Web Development Web Frameworks Django Flask Bottle Pyramid TurboGears Falcon Morepath Sanic Other Web Frameworks Template Engines Jinja2 Mako Django Templates Web Design HTML Cascading Style Sheets (CSS) Responsive Design Minification CSS Frameworks Bootstrap Foundation JavaScript React Vue.js Angular Task Queues Celery Redis Queue (RQ) Dramatiq Static Site Generators Pelican Lektor MkDocs Testing Unit Testing Integration Testing Debugging Code Metrics Networking HTTPS WebSockets WebRTC Web APIs Microservices Webhooks Bots API Creation API Frameworks Django REST Framework API Integration Twilio Stripe Slack Okta Security SQL Injection CSRF 5. Deployment 6. DevOps Changelog What Full Stack Means About the Author Future Directions Page Statuses ...or view the full table of contents.

Full Stack Python

Full Stack Python is an open book that explains concepts in plain language and provides helpful resources for those topics.

Updates via Twitter & Facebook.

Chapters

1. Introduction 2. Development Environments 3. Data 4. Web Development » CSRF 5. Deployment 6. DevOps Changelog What Full Stack Means About the Author Future Directions Page Statuses ...or view the full table of contents.

Matt Makai 2012-2022