Marmara El Masri

Current state of client-side extensions aimed at protecting against CSRF-like attacks

2017

For over a decade now, cross-site request forgery (CSRF) has been persistently named one of the OWASP's top 10 Web vulnerabilities. Recently, a variant of CSRF - named cross-site framing attack (CSFA) - has also …