出典:Wiktionary
cross-site request forgery (countable かつ uncountable, 複数形 cross-site request forgeries)
出典:Wikipedia
出典:『Wikipedia』 (2011/06/05 15:48 UTC 版)
Cross-site request forgery, also known as a one-click attack or session riding and abbreviated as CSRF (pronounced sea-surf) or XSRF, is a type of malicious exploit of a website whereby unauthorized commands are transmitted from a user that the website trusts. Unlike cross-site scripting (XSS), which exploits the trust a user has for a particular site, CSRF exploits the trust that a site has in a user's browser.
![]()