AW: Cross-Site Request Forgery

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

To: <users@xxxxxxxxxxxxxxxx>
Subject: AW: Cross-Site Request Forgery
From: "Abfalterer, Armin" <Armin.Abfalterer@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
Date: Mon, 20 Feb 2012 16:24:35 +0100
In-reply-to: <CAFHbX1J9QQHW+St1Jytp+TQ36S8s6PyETCpq=jDmP3RmNvG0mg@mail.gmail.com>
Reply-to: users@xxxxxxxxxxxxxxxx
Thread-index: Aczv4Hsl5C4E47wvQF6z3YPwHhb8MgAAsvIA
Thread-topic: Cross-Site Request Forgery

> Does anyone know of ANY web server that
> provides
> > CSRF protection at the web server level?  I'm curious.
> >

Take a look at mod_security that provides CSRF prevention mechanism by means of JS injection.

Attachment: smime.p7s
Description: S/MIME cryptographic signature

References:
- Cross-Site Request Forgery
  - From: Henrik Strand
- Re: Cross-Site Request Forgery
  - From: Mark Montague
- Re: Cross-Site Request Forgery
  - From: Tom Evans

Prev by Date: Re: Cross-Site Request Forgery
Next by Date: Re: unexpected EOF while looking for matching
Previous by thread: Re: Cross-Site Request Forgery
Next by thread: Very slow Apache proxy server under IE
Index(es):
- Date
- Thread

[Index of Archives] [Open SSH Users] [Linux ACPI] [Linux Kernel] [Linux Laptop] [Kernel Newbies] [Security] [Netfilter] [Bugtraq] [Squid] [Yosemite News] [MIPS Linux] [ARM Linux] [Linux Security] [Linux RAID] [Samba] [Video 4 Linux] [Device Mapper]

Powered by Linux