WD 121

Cross Site Request Forgery (CSRF)

Ensure that requests made to the server-side are legitimate and originate from your website / app to prevent CSRF attacks.

Explore Resources
Instagram of AlphabagFacebook of AlphabagFacebook of AlphabagFacebook of Alphabag

Knowledge Brief

No items found.

Related Knowledge

HTTP Strict Transport Security (HSTS)
Cross Site Scripting (XSS)
Content Type Options
X-Frame-Options (XFO)
Browser Compatibility
Modernizr

Related Knowledge

WD 120

HTTP Strict Transport Security (HSTS)

The HTTP header is set to Strict-Transport-Security.

WD 122

Cross Site Scripting (XSS)

Make sure the page or website is free from XSS possible issues.

WD 123

Content Type Options

Prevents Chrome and IE from trying to mime-sniff the content-type of a response away from the one being declared by the server.

WD 124

X-Frame-Options (XFO)

Protects your visitors against clickjacking attacks.

WD 065

Browser Compatibility

Make sure site is W3C compliant. View on multiple browsers.

WD 110

Modernizr

It finds out what features and capabilities the browser has.