While the whole method of XSS and CSRF attacks are totally different, the main difference is that:
XSS - Runs a Script on the brwoser
CSRF - Sends a (HTTP) request from the browser.
Is correct (a Yes or No answer will suffice)?
Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.Sign up to join this community