XSRF Prevention with SameSite
The SameSite directive can be used to prevent XSRF attacks. Let's see how.
We'll cover the following...
Introduction to SameSite
We now have a very strong defense against XSRF—using an anti-XSRF hidden form input on all state-modifying requests. But that defense requires ongoing diligence. We’re ...