Tag Info

New answers tagged


Related: CSRF protection for unauthenticated requests, actions, searches or comments?. This question is not a duplicate as you are asking how to test for it. In just the same way you would test for normal CSRF. Instigate a request to the server that would simulate the request arriving cross-domain. That is: Origin and referer headers appropriately set. ...


I had this problematic a few weeks ago. I simply resolved it by making a webservice accessible via Https. The user login from a local client application via a login/password form which is sent by https. The server get the data and send a Token to the client. The Token is stored into the application for login purpose and expires after 2 weeks. When the ...

Top 50 recent answers are included