CSRF protector – Concept, Design and Future | Minhaz’s Blog

[utterances-bot]

CSRF protector – Concept, Design and Future | Minhaz’s Blog

CSRF has been on OWASP Top 10 for a long time, and several methods have been implemented to mitigate it. Most of the web frameworks have inbuilt methods, which can be used to make a website safe against CSRF. However lot of web applications are still vulnerable to CSRF and its partially because developer tend to forget to implement it with every FORM or AJAX requests. And that is because the approach used for CSRF Mitigation in most of the frameworks is not centralised, we have to attach a token with every FORM we want to protect. OWASP CSRF Protector on the other hand used centralised approach, it employs javascript on client side to ensure, tokens are sent with every request sent from client, so that is correctly valid

https://blog.minhazav.dev/CSRF-Protector-concept-design-and-future/

[apishdad]

HI Minhaz, Is the module that you have listed for Apache work on Apache 2.4?